NVD

Id
20463  
Name
CVE-2016-5118  
Description
The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-06-10  
Modified Date
2017-01-03  
Seq
2016-5118  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
111850 20463 CVE-2016-5118 http://git.imagemagick.org/repos/ImageMagick/commit/40639d173aa8c76b850d625c630b711fee4dcfb8  View
111851 20463 CVE-2016-5118 http://hg.code.sf.net/p/graphicsmagick/code/file/41876934e762/ChangeLog  View
111852 20463 CVE-2016-5118 http://hg.code.sf.net/p/graphicsmagick/code/rev/ae3928faa858  View
111853 20463 CVE-2016-5118 openSUSE-SU-2016:1521  View
111854 20463 CVE-2016-5118 openSUSE-SU-2016:1522  View
111855 20463 CVE-2016-5118 openSUSE-SU-2016:1534  View
111856 20463 CVE-2016-5118 SUSE-SU-2016:1570  View
111857 20463 CVE-2016-5118 SUSE-SU-2016:1610  View
111858 20463 CVE-2016-5118 SUSE-SU-2016:1614  View
111859 20463 CVE-2016-5118 openSUSE-SU-2016:1653  View
111860 20463 CVE-2016-5118 DSA-3591  View
111861 20463 CVE-2016-5118 [oss-security] 20160529 CVE Request: GraphicsMagick and ImageMagick popen() shell vulnerability via filename  View
111862 20463 CVE-2016-5118 [oss-security] 20160529 Re: CVE Request: GraphicsMagick and ImageMagick popen() shell vulnerability via filename  View
111863 20463 CVE-2016-5118 http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html  View
111864 20463 CVE-2016-5118 http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
111865 20463 CVE-2016-5118 90938  View
111866 20463 CVE-2016-5118 1035984  View
111867 20463 CVE-2016-5118 1035985  View
111868 20463 CVE-2016-5118 SSA:2016-152-01  View
111869 20463 CVE-2016-5118 USN-2990-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2378 JVNDB-2016-003151 GraphicsMagick および ImageMagick の blob.c の OpenBlob 関数における任意のコードを実行される脆弱性 GraphicsMagick および ImageMagick の blob.c の OpenBlob 関数には、任意のコードを実行される脆弱性が存在します。 CVE-2016-5118 91624 CVE-2016-5118 20463 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003151.html 2016-05-30 2016-11-21 View