CVE-2014-9817

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pdb file.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Mar 30, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2014

CVE-2014-98185.5ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a malformed sun file.CVE-2014-98197.8Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a different vulnerabilCVE-2014-98207.8Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pnm file.CVE-2014-98217.8Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file.CVE-2014-98227.8Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted quantum file.CVE-2014-98237.8Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a different vulnerabilCVE-2014-98247.8Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a different vulnerabiliCVE-2014-98257.8Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a different vulnerabiliCVE-2014-98269.8ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files.CVE-2014-98278.8coders/xpm.c in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file.CVE-2014-98288.8coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file.CVE-2014-98296.5coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted sun file.
CVE-2014-9817: High severity, CVSS 7.8 | Vulnix