Wind River Support Network

HomeDefectsLIN5-21904
Fixed

LIN5-21904 : Security Advisory - imagemagick - CVE-2016-5118

Created: Aug 17, 2016    Updated: May 29, 2018
Resolved Date: Aug 21, 2016
Found In Version: 5.0.1.36
Fix Version: 5.0.1.38
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Userspace

Description

The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename. 

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5118

Other Downloads


Live chat
Online