CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–1 of 1 advisories (Page 1/1)

CVE-2016-37155.5/MEDIUMEPSS 75.3%CISA KEV

2016-05-05

ImageMagick EPHEMERAL Coder Arbitrary File Deletion Vulnerability (CVE-2016-3715)

[Affected Scope] ImageMagick before version 6.9.3-10 and 7.x before version 7.0.1-1

[Impact] Remote attackers can delete arbitrary files on the system by tricking the application into processing a crafted image

[Mitigation] Upgrade ImageMagick to the latest secure versions (6.9.3-10+, 7.0.1-1+) or disable the EPHEMERAL coder via policy.xml