CyberSec.Space Logo
Back to CVE Browser

CVE-2016-3714

Known Exploited (CISA KEV)HIGH
8.4
CVSS Severity Score
EPSS Score29.8580%
EPSS Percentile85.31th
PublishedMay 5, 2016
Last ModifiedApr 21, 2026

Vulnerability Description

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka "ImageTragick."

Affected Platforms (CPE)

📦
Imagemagick

Imagemagick

<= 6.9.3-9
📦
Imagemagick

Imagemagick

= 7.0.0-0
📦
Imagemagick

Imagemagick

= 7.0.1-0
💻
Canonical

Ubuntu Linux

= 12.04
💻
Canonical

Ubuntu Linux

= 14.04
💻
Canonical

Ubuntu Linux

= 15.10
💻
Canonical

Ubuntu Linux

= 16.04
💻
Debian

Debian Linux

= 8.0
💻
Debian

Debian Linux

= 9.0
💻
Opensuse

Leap

= 42.1
💻
Opensuse

Opensuse

= 13.2
💻
Suse

Suse Linux Enterprise Server

= 12

References & Advisories

🔗 http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog
🔗 http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html
🔗 http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html
🔗 http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html
🔗 http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html
🔗 http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00041.html
🔗 http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html
🔗 http://packetstormsecurity.com/files/152364/ImageTragick-ImageMagick-Proof-Of-Concepts.html

Related Vulnerabilities

CVE-2004-098110.0

Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a ce...

CVE-2019-199529.8

In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGI...

CVE-2019-199489.8

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c.

CVE-2021-335649.8

An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitr...