suse · CVE-2014-9845

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2014-9845 severity moderate: SUSE including 48 source package names (GraphicsMagick-1.2.5-4.41.1, ImageMagick-6.4.3.6-7.45.1, …), 106 product×package rows across 29 product lines (SUSE Linux Enterprise Desktop 12 SP1, SUSE Linux Enterprise Desktop 12 SP2, … (29 product lines)): Fixed 106.

Description:

The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file.