Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv3

CVE-2014-9854

Published: 17/03/2017 Updated: 30/10/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Imagemagick

Vulnerability Summary

coders/tiff.c in ImageMagick allows remote malicious users to cause a denial of service (application crash) via vectors related to the "identification of image."

Vulnerable Product Search on Vulmon Subscribe to Product

imagemagick imagemagick -

opensuse leap 42.1

opensuse opensuse 13.2

suse linux enterprise software development kit 11

suse linux enterprise server 11

suse suse linux enterprise server 12

canonical ubuntu linux 16.04

canonical ubuntu linux 16.10

canonical ubuntu linux 12.04

canonical ubuntu linux 14.04

Vendor Advisories

Ubuntu Security Notice: imagemagick vulnerabilities
Several security issues were fixed in ImageMagick ...
Red Hat: CVE-2014-9854
coders/tiffc in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors related to the "identification of image" ...

References

CWE-399https://bugzilla.redhat.com/show_bug.cgi?id=1343514https://anonscm.debian.org/cgit/collab-maint/imagemagick.git/commit/?h=debian-patches/6.8.9.9-4-for-upstream&id=5ee6f49297c8137cae527429e0267462c14ec3edhttp://www.ubuntu.com/usn/USN-3131-1http://www.openwall.com/lists/oss-security/2016/06/02/13http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00018.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-07/msg00011.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-07/msg00009.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.htmlhttp://git.imagemagick.org/repos/ImageMagick/commit/7fb9b7e095a65b4528d0180e26574f2bc7cd0e8bhttps://usn.ubuntu.com/3131-1/https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook