Description
ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders. This allows a remote attacker to execute arbitrary code via shell metacharacters in a crafted image.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| debian_linux | debian / debian_linux | 8.0 | affected |
| debian_linux | debian / debian_linux | 8.0 | affected |
| debian_linux | debian / debian_linux | 9.0 | affected |
| debian_linux | debian / debian_linux | 9.0 | affected |
| imagemagick | imagemagick / imagemagick | >= 0, <= 6.9.3-9 | affected |
| imagemagick | imagemagick / imagemagick | 7.0.0-0 | affected |
| imagemagick | imagemagick / imagemagick | 7.0.1-0 | affected |
| leap | opensuse / leap | 42.1 | affected |
| n/a | n/a / n/a | n/a | affected |
| opensuse | opensuse / opensuse | 13.2 | affected |
| suse_linux_enterprise_server | suse / suse_linux_enterprise_server | 12 | affected |
| ubuntu_linux | canonical / ubuntu_linux | 12.04 | affected |
| ubuntu_linux | canonical / ubuntu_linux | 12.04 | affected |
| ubuntu_linux | canonical / ubuntu_linux | 12.04 | affected |
| ubuntu_linux | canonical / ubuntu_linux | 12.04 | affected |
| ubuntu_linux | canonical / ubuntu_linux | 14.04 | affected |
| ubuntu_linux | canonical / ubuntu_linux | 14.04 | affected |
| ubuntu_linux | canonical / ubuntu_linux | 14.04 | affected |
| ubuntu_linux | canonical / ubuntu_linux | 14.04 | affected |
| ubuntu_linux | canonical / ubuntu_linux | 15.10 | affected |
| ubuntu_linux | canonical / ubuntu_linux | 15.10 | affected |
| ubuntu_linux | canonical / ubuntu_linux | 15.10 | affected |
| ubuntu_linux | canonical / ubuntu_linux | 15.10 | affected |
| ubuntu_linux | canonical / ubuntu_linux | 16.04 | affected |
| ubuntu_linux | canonical / ubuntu_linux | 16.04 | affected |
| ubuntu_linux | canonical / ubuntu_linux | 16.04 | affected |
| ubuntu_linux | canonical / ubuntu_linux | 16.04 | affected |