CVE-2014-9809

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted xwd image.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Mar 30, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2014

CVE-2014-98105.5The dpx file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a maCVE-2014-98115.5The xwd file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a maCVE-2014-98125.5ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted ps file.CVE-2014-98135.5ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted viff file.CVE-2014-98145.5ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted wpg file.CVE-2014-98155.5ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted wpg file.CVE-2014-98165.5ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted viff file.CVE-2014-98177.8Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pdb file.CVE-2014-98185.5ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a malformed sun file.CVE-2014-98197.8Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a different vulnerabilCVE-2014-98207.8Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pnm file.CVE-2014-98217.8Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file.
CVE-2014-9809: Medium severity, CVSS 5.5 | Vulnix