NVD

Id
19482  
Name
CVE-2016-3714  
Description
The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka "ImageTragick."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-05-05  
Modified Date
2016-12-27  
Seq
2016-3714  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
107275 19482 CVE-2016-3714 http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog  View
107276 19482 CVE-2016-3714 SUSE-SU-2016:1260  View
107277 19482 CVE-2016-3714 openSUSE-SU-2016:1261  View
107278 19482 CVE-2016-3714 openSUSE-SU-2016:1266  View
107279 19482 CVE-2016-3714 SUSE-SU-2016:1275  View
107280 19482 CVE-2016-3714 SUSE-SU-2016:1301  View
107281 19482 CVE-2016-3714 openSUSE-SU-2016:1326  View
107282 19482 CVE-2016-3714 RHSA-2016:0726  View
107283 19482 CVE-2016-3714 DSA-3580  View
107284 19482 CVE-2016-3714 [oss-security] 20160503 ImageMagick Is On Fire -- CVE-2016-3714  View
107285 19482 CVE-2016-3714 [oss-security] 20160504 Re: ImageMagick Is On Fire -- CVE-2016-3714  View
107286 19482 CVE-2016-3714 http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html  View
107287 19482 CVE-2016-3714 http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
107288 19482 CVE-2016-3714 http://www.rapid7.com/db/modules/exploit/unix/fileformat/imagemagick_delegate  View
107289 19482 CVE-2016-3714 20160513 May 2016 - HipChat Server - Critical Security Advisory  View
107290 19482 CVE-2016-3714 89848  View
107291 19482 CVE-2016-3714 1035742  View
107292 19482 CVE-2016-3714 SSA:2016-132-01  View
107293 19482 CVE-2016-3714 USN-2990-1  View
107294 19482 CVE-2016-3714 https://access.redhat.com/security/vulnerabilities/2296071  View
107295 19482 CVE-2016-3714 https://bugzilla.redhat.com/show_bug.cgi?id=1332492  View
107296 19482 CVE-2016-3714 https://imagetragick.com/  View
107297 19482 CVE-2016-3714 39791  View
107298 19482 CVE-2016-3714 https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588  View
107299 19482 CVE-2016-3714 https://www.imagemagick.org/script/changelog.php  View
107300 19482 CVE-2016-3714 VU#250519  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1670 JVNDB-2016-002443 ImageMagick に入力値検証不備の脆弱性 ImageMagick は、delegate の仕組みを使って入力データの処理を行う前の検証が適切に実行されていないため、結果として任意のコードを実行される可能性があります。この問題は "ImageTragick" としても知られています。 CVE-2016-3714 90220 CVE-2016-3714 19482 10 8.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002443.html 2016-05-04 2016-11-18 View