cbcvebase.
CVE-2016-3715
published 2016-05-05

CVE-2016-3715: The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

medium5.5CVSS 3.1
AVLACLPRNUIRSUCNIHAN
KEVITWEXPLOIT
CISA Known Exploited Vulnerabilitydue 2022-05-03
Exploited in the wild
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

Affected

88 ranges· showing 25
VendorProductVersion rangeFixed in
canonicalubuntu_linux——
canonicalubuntu_linux——
canonicalubuntu_linux——
canonicalubuntu_linux——
debiangraphicsmagick< graphicsmagick 1.3.24-1 (bookworm)graphicsmagick 1.3.24-1 (bookworm)
debianimagemagick< graphicsmagick 1.3.24-1 (bookworm)graphicsmagick 1.3.24-1 (bookworm)
graphicsmagickgraphicsmagick>= 0 < 1.3.24-11.3.24-1
graphicsmagickgraphicsmagick>= 0 < 1.3.24-11.3.24-1
graphicsmagickgraphicsmagick>= 0 < 1.3.24-11.3.24-1
graphicsmagickgraphicsmagick>= 0 < 1.3.24-11.3.24-1
imagemagickimagemagick< 6.9.3-106.9.3-10
imagemagickimagemagick——
imagemagickimagemagick——
imagemagickimagemagick>= 0 < 8:6.9.6.2+dfsg-28:6.9.6.2+dfsg-2
imagemagickimagemagick>= 0 < 8:6.9.6.2+dfsg-28:6.9.6.2+dfsg-2
imagemagickimagemagick>= 0 < 8:6.9.6.2+dfsg-28:6.9.6.2+dfsg-2
imagemagickimagemagick>= 0 < 8:6.9.6.2+dfsg-28:6.9.6.2+dfsg-2
imagemagickimagemagick>= 0 < 8:6.7.7.10-6ubuntu3.18:6.7.7.10-6ubuntu3.1
imagemagickimagemagick>= 0 < 8:6.8.9.9-7ubuntu5.18:6.8.9.9-7ubuntu5.1
opensuseleap——
opensuseopensuse——
oraclelinux——
oraclelinux——
oraclesolaris——
oraclesolaris——

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
osv8.4HIGH
vulncheck5.5MEDIUM
cisa5.5MEDIUM