CVE-2016-3714
Known Exploited (CISA KEV)HIGH
8.4
CVSS Severity Score
Vulnerability Description
The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka "ImageTragick."
Affected Platforms (CPE)
📦
Imagemagick
Imagemagick
<= 6.9.3-9📦
Imagemagick
Imagemagick
= 7.0.0-0📦
Imagemagick
Imagemagick
= 7.0.1-0💻
Canonical
Ubuntu Linux
= 12.04💻
Canonical
Ubuntu Linux
= 14.04💻
Canonical
Ubuntu Linux
= 15.10💻
Canonical
Ubuntu Linux
= 16.04💻
Debian
Debian Linux
= 8.0💻
Debian
Debian Linux
= 9.0💻
Opensuse
Leap
= 42.1💻
Opensuse
Opensuse
= 13.2💻
Suse