Descripción
ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders. This allows a remote attacker to execute arbitrary code via shell metacharacters in a crafted image.
Acción recomendada
Aplicar las mitigaciones del fabricante; si no están disponibles, discontinuar el uso del producto.
Referencias
- This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: , https://imagemagick.org/archive/releases/ imagemagick.org/discourse-server/viewtopic.php
- Ficha en NVD (NIST) nvd.nist.gov/vuln/detail/CVE-2016-3714
Otras vulnerabilidades de ImageMagick en el catálogo
- CVE-2016-3718 ImageMagick Server-Side Request Forgery (SSRF) Vulnerability Alta 03-11-2021
- CVE-2016-3715 ImageMagick Arbitrary File Deletion Vulnerability Alta 03-11-2021