CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2016-05-05
ImageMagick Remote Code Execution (RCE) Vulnerability (CVE-2016-3714, 'ImageTragick') Analysis and Mitigation Guide
[Affected Scope] All systems running ImageMagick versions prior to 6.9.3-10 and 7.x prior to 7.0.1-1
[Impact] Remote attackers can execute arbitrary system commands with the privileges of the web server by uploading or processing a specially crafted image file
[Mitigation] Upgrade ImageMagick to the latest secure version (6.9.3-10+ or 7.0.1-1+) or disable vulnerable coders (MVG, MSL, etc.) via the policy.xml configuration file