CVE-2016-3714 in ImageMagick

Summary

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka "ImageTragick."

Be aware that VulDB is the high quality source for vulnerability data.

• Reservation: 03/30/2016
• Disclosure: 05/05/2016
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-20 (Confirmed)
• Exploit: Download
• CVSS: 8.0
• EPSS: 0.93579
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-3714
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-3714
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-3714/