CVE-2016-3717

4 known exploits for CVE-2016-3717

The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image.

Affected products: Alt Linux, Centos, Imagemagick, Red Hat, Suse, Ubuntu
Canonical Ubuntu Linux: = 12.04, 14.04, 15.10, 16.04

Fix: Available
CVSS 2.0: 7.1 HIGH
CVSS 3.1: 5.5 MEDIUM
EPSS: 20.4% (97th percentile)
Weakness: CWE-200
NVD status: Modified
Published: 2016-05-05

CVE-2016-3717 at NVD

Authoritative description, scoring and affected products

ImageMagick 7.0.1-0 6.9.3-9 - ImageTragick Multiple Vulnerabilities

2016-05-04 Nikolay ErmishkinEXPLOITPACK

ImageMagick 7.0.1-0 / 6.9.3-9 - 'ImageTragick ' Multiple Vulnerabilities

2016-05-04 Nikolay ErmishkinEXPLOITDB

ImageMagick 命令执行漏洞 (ImageTragick)

2016-05-04 RootSEEBUG

ImageMagick 6.9.3-9 / 7.0.1-0 - Multiple Vulnerabilities (ImageTragick)

2016-05-04 Nikolay ErmishkinZDT