CVE-2014-1947

Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of layers in a PSD image, involving the L%02ld string, a different vulnerability than CVE-2014-2030.

• CWE-787

• http://www.openwall.com/lists/oss-security/2014/02/12/13Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/02/12/2Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/02/13/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/02/13/5Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/02/19/13Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1064098Issue Tracking, Third Party Advisory
• https://www.suse.com/support/update/announcement/2014/suse-su-20140359-1.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2014/02/12/13Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/02/12/2Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/02/13/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/02/13/5Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/02/19/13Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1064098Issue Tracking, Third Party Advisory
• https://www.suse.com/support/update/announcement/2014/suse-su-20140359-1.htmlThird Party Advisory

Published

Feb 17, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-1939java/android/webkit/BrowserFrame.java in Android before 4.4 …
• CVE-2014-1942Cross-site scripting (XSS) vulnerability in aal/loginverific…
• CVE-2014-1943Fine Free file before 5.17 allows context-dependent attacker…
• CVE-2014-1944Cross-site scripting (XSS) vulnerability in Ilch CMS 2.0 and…
• CVE-2014-1945SQL injection vulnerability in ajax_udf.php in OpenDocMan be…
• CVE-2014-1946OpenDocMan 1.2.7 and earlier does not properly validate allo…
• CVE-2014-1948OpenStack Image Registry and Delivery Service (Glance) 2013.…
• CVE-2014-1949GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gn…
• CVE-2014-1950Use-after-free vulnerability in the xc_cpupool_getinfo funct…
• CVE-2014-1955Cross-site scripting (XSS) vulnerability in FortiGuard Forti…
• CVE-2014-1956CRLF injection vulnerability in FortiGuard FortiWeb before 5…
• CVE-2014-1957FortiGuard FortiWeb before 5.0.3 allows remote authenticated…