CVE-2016-10048

NONE EPSS 93.0%
Published Mar 23, 20179y ago · Modified Jun 17, 20262w ago
Find Similar
Published Mar 23, 2017 9y ago
Last Modified Jun 17, 2026 2w ago

Description

Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors.

Threat Intelligence

EPSS Exploit Probability
93.0% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-22 Path Traversal Resource Mgmt

Affected Products 2

VendorProductVersionRange
imagemagickimagemagick6.9.4-7any
opensuse_projectleap42.1any

References 6

  • lists.opensuse.org http://lists.opensuse.org/opensuse-updates/2017-02/msg00028.html
    Third Party Advisory
  • lists.opensuse.org http://lists.opensuse.org/opensuse-updates/2017-02/msg00031.html
    Third Party Advisory
  • openwall.com http://www.openwall.com/lists/oss-security/2016/12/26/9
    Mailing ListThird Party Advisory
  • securityfocus.com http://www.securityfocus.com/bid/95186
    Third Party AdvisoryVDB Entry
  • bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=1410451
    Issue TrackingThird Party Advisory
  • github.com https://github.com/ImageMagick/ImageMagick/commit/fc6080f1321fd21e86ef916195cc110b05d9effb
    Issue TrackingPatchVendor Advisory

Remediation

  • github.com https://github.com/ImageMagick/ImageMagick/commit/fc6080f1321fd21e86ef916195cc110b05d9effb
    Issue TrackingPatchVendor Advisory