CVE:CVE-2014-9852
CNNVD:CNNVD-201606-124
ImageMagick是美国ImageMagick Studio公司的一套开源的图象处理软件。该软件可读取、转换、写入多种格式的图片。
ImageMagick中的distribute-cache.c文件存在安全漏洞。远程攻击者可利用该漏洞在浏览器上下文中执行任意代码，绕过安全限制并执行未授权的操作，造成拒绝服务或检索敏感信息。
solution:Upgrade imagemagick imagemagick to a higher version than -; Upgrade opensuse opensuse to a higher version than 13.2,and avoid the version 13.2; Upgrade suse linux_enterprise_desktop to a higher version than 12:sp1,and avoid the version 12:sp1; Upgrade suse linux_enterprise_server to a higher version than 12:sp1,and avoid the version 12:sp1; Upgrade suse linux_enterprise_software_development_kit to a higher version than 12:sp1,and avoid the version 12:sp1; Upgrade suse linux_enterprise_workstation_extension to a higher version than 12:sp1,and avoid the version 12:sp1; Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1