CVE-2016-3714

Published: May 5, 2016Modified: Apr 21, 2026CISA KEV

8.4

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.5 / Impact: 5.9

Source: NVD

Description

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka "ImageTragick."

Affected (12)

Products: Imagemagick: Imagemagick · Canonical: Ubuntu Linux · Debian: Debian Linux · +2 more

Show all products

Imagemagick: Imagemagick · Canonical: Ubuntu Linux · Debian: Debian Linux · Opensuse: Leap, Opensuse · Suse: Suse Linux Enterprise Server

1 product

1 product

1 product

2 products

1 product

Suse Linux Enterprise Server

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Imagemagick Imagemagick	Up to 6.9.3-9
Imagemagick Imagemagick	Version 7.0.0-0
Imagemagick Imagemagick	Version 7.0.1-0

Configuration B

9 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 15.10
Canonical Ubuntu Linux	Version 16.04
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0
Opensuse Leap	Version 42.1
Opensuse Opensuse	Version 13.2
Suse Suse Linux Enterprise Server	Version 12

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (61)

http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog

Source: secalert@redhat.com

Patch

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00041.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html

Source: secalert@redhat.com

Third Party Advisory

http://packetstormsecurity.com/files/152364/ImageTragick-ImageMagick-Proof-Of-Concepts.html

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://rhn.redhat.com/errata/RHSA-2016-0726.html

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2016/dsa-3580

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2016/dsa-3746

Source: secalert@redhat.com

Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/05/03/13

Source: secalert@redhat.com

Mailing List

http://www.openwall.com/lists/oss-security/2016/05/03/18

Source: secalert@redhat.com

Mailing List

http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html

Source: secalert@redhat.com

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

Source: secalert@redhat.com

Third Party Advisory

http://www.rapid7.com/db/modules/exploit/unix/fileformat/imagemagick_delegate

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/archive/1/538378/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/89848

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1035742

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2990-1

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/security/vulnerabilities/2296071

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1332492

Source: secalert@redhat.com

Issue Tracking

https://imagetragick.com/

Source: secalert@redhat.com

Vendor Advisory

https://security.gentoo.org/glsa/201611-21

Source: secalert@redhat.com

Third Party Advisory

https://www.exploit-db.com/exploits/39767/

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/39791/

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588

Source: secalert@redhat.com

Vendor Advisory

https://www.imagemagick.org/script/changelog.php

Source: secalert@redhat.com

Vendor Advisory

https://www.kb.cert.org/vuls/id/250519

Source: secalert@redhat.com

Third Party AdvisoryUS Government Resource

http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog