CVE-2016-5118

Related Files

Debian Security Advisory 3746-1

Posted Dec 26, 2016

Authored by Debian | Site debian.org

Debian Linux Security Advisory 3746-1 - Several vulnerabilities have been discovered in GraphicsMagick, a collection of image processing tool, which can cause denial of service attacks, remote file deletion, and remote command execution.

tags | advisory, remote, denial of service, vulnerability

systems | linux, debian

advisories | CVE-2015-8808, CVE-2016-2317, CVE-2016-2318, CVE-2016-3714, CVE-2016-3715, CVE-2016-5118, CVE-2016-5240, CVE-2016-7800, CVE-2016-7996, CVE-2016-7997, CVE-2016-8682, CVE-2016-8683, CVE-2016-8684, CVE-2016-9830

SHA-256 | accbe7218e293472b633d9075a6a9f156fffbefe2b412453ad96dbd227c13359

Download | Favorite | View

Red Hat Security Advisory 2016-1237-01

Posted Jun 17, 2016

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2016-1237-01 - ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple image formats. Security Fix: It was discovered that ImageMagick did not properly sanitize certain input before using it to invoke processes. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities, would lead to arbitrary execution of shell commands with the privileges of the user running the application.

tags | advisory, remote, arbitrary, shell

systems | linux, redhat

advisories | CVE-2015-8895, CVE-2015-8896, CVE-2015-8897, CVE-2015-8898, CVE-2016-5118, CVE-2016-5239, CVE-2016-5240

SHA-256 | dd956fe375193ac7d12e484e761baab83a6050e459ddac505b9bdadb473df483

Download | Favorite | View

Ubuntu Security Notice USN-2990-1

Posted Jun 2, 2016

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 2990-1 - Nikolay Ermishkin and Stewie discovered that ImageMagick incorrectly sanitized untrusted input. A remote attacker could use these issues to execute arbitrary code. These issues are known as "ImageTragick". This update disables problematic coders via the /etc/ImageMagick-6/policy.xml configuration file. In certain environments the coders may need to be manually re-enabled after making sure that ImageMagick does not process untrusted input. Various other issues were also addressed.

tags | advisory, remote, arbitrary

systems | linux, ubuntu

advisories | CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717, CVE-2016-3718, CVE-2016-5118

SHA-256 | 73f21e3761ff9c2c84217f7d140aa28af93ba5bd5e170c1b968c4697b5b4030e

Download | Favorite | View

Debian Security Advisory 3591-1

Posted Jun 1, 2016

Authored by Debian | Site debian.org

Debian Linux Security Advisory 3591-1 - Bob Friesenhahn from the GraphicsMagick project discovered a command injection vulnerability in ImageMagick, a program suite for image manipulation. An attacker with control on input image or the input filename can execute arbitrary commands with the privileges of the user running the application.

tags | advisory, arbitrary

systems | linux, debian

advisories | CVE-2016-5118

SHA-256 | ba44ce3e1259313b7e90399ec59f58622a898da2a842de433343bef4220f354e

Download | Favorite | View

Slackware Security Advisory - imagemagick Updates

Posted May 30, 2016

Authored by Slackware Security Team | Site slackware.com

Slackware Security Advisory - New imagemagick packages are available for Slackware 14.0, 14.1, and -current to fix a security issue.

tags | advisory

systems | linux, slackware

advisories | CVE-2016-5118

SHA-256 | 94e4c8893fef5dff9472b543506541a4ab4391cf95cf3158fb739ebd3e085fae

Download | Favorite | View