Wind River Support Network

HomeDefectsLIN8-4495

Fixed

LIN8-4495 : Security Advisory - imagemagick - CVE-2016-5118

Created: Aug 17, 2016 Updated: Dec 3, 2018

Resolved Date: Aug 18, 2016

Found In Version: 8.0

Fix Version: 8.0.0.9

Severity: Standard

Applicable for: Wind River Linux 8

Component/s: Userspace

Description

The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename. 

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5118

Other Downloads

CVEs

CVE-2016-5118