Candidate: CVE-2014-9824 PublicDate: 2017-03-30 15:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9824 Description: Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a different vulnerability than CVE-2014-9825. Ubuntu-Description: Notes: mdeslaur> This is 0025-Fix-handling-of-corrupted-of-psd-sun-and-xpm-file.patch Bugs: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=773834 Priority: medium Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H [7.8 HIGH] Patches_imagemagick: upstream_imagemagick: released (8:6.8.9.9-4) precise_imagemagick: not-affected (code not present) trusty_imagemagick: not-affected (code not present) trusty/esm_imagemagick: DNE (trusty was not-affected [code not present]) vivid/stable-phone-overlay_imagemagick: DNE vivid/ubuntu-core_imagemagick: DNE wily_imagemagick: not-affected (8:6.8.9.9-5ubuntu2) xenial_imagemagick: not-affected (8:6.8.9.9-7ubuntu5) esm-infra/xenial_imagemagick: not-affected (8:6.8.9.9-7ubuntu5) yakkety_imagemagick: not-affected (8:6.8.9.9-7ubuntu8) devel_imagemagick: not-affected (8:6.8.9.9-7ubuntu9)