CVE-2016-3715: ImageMagick Arbitrary File Deletion Vulnerability

First published: Thu May 05 2016(Updated: )

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

Credit: secalert@redhat.com secalert@redhat.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/type
• agent/description
• agent/remedy
• agent/title
• agent/weakness
• collector/nvd-api
• source/NVD
• agent/software-canonical-lookup
• agent/author
• agent/severity
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• agent/first-publish-date
• exploited/true
• collector/cisa-known-exploited
• source/CISA
• agent/references
• agent/tags
• agent/softwarecombine
• agent/event
• collector/nvd-cve
• vendor/redhat
• canonical/redhat enterprise linux desktop
• version/redhat enterprise linux desktop/6.0
• version/redhat enterprise linux desktop/7.0
• canonical/redhat enterprise linux hpc node
• version/redhat enterprise linux hpc node/6.0
• version/redhat enterprise linux hpc node/7.0
• canonical/redhat enterprise linux hpc node eus
• version/redhat enterprise linux hpc node eus/7.2
• canonical/redhat enterprise linux server
• version/redhat enterprise linux server/6.0
• version/redhat enterprise linux server/7.0
• canonical/redhat enterprise linux server aus
• version/redhat enterprise linux server aus/7.2
• canonical/redhat enterprise linux server eus
• version/redhat enterprise linux server eus/7.2
• canonical/redhat enterprise linux server supplementary eus
• version/redhat enterprise linux server supplementary eus/6.7z
• canonical/redhat enterprise linux workstation
• version/redhat enterprise linux workstation/6.0
• version/redhat enterprise linux workstation/7.0
• vendor/imagemagick
• canonical/imagemagick imagemagick
• version/imagemagick imagemagick/6.9.3-9
• version/imagemagick imagemagick/7.0.0-0
• version/imagemagick imagemagick/7.0.1-0
• vendor/canonical
• canonical/canonical ubuntu linux
• version/canonical ubuntu linux/12.04
• version/canonical ubuntu linux/14.04
• version/canonical ubuntu linux/15.10
• version/canonical ubuntu linux/16.04
• canonical/redhat enterprise linux eus
• version/redhat enterprise linux eus/6.7
• version/redhat enterprise linux eus/7.2
• version/redhat enterprise linux eus/7.3
• version/redhat enterprise linux eus/7.4
• version/redhat enterprise linux eus/7.5
• version/redhat enterprise linux eus/7.6
• version/redhat enterprise linux eus/7.7
• canonical/redhat enterprise linux for ibm z systems
• version/redhat enterprise linux for ibm z systems/6.0_s390x
• version/redhat enterprise linux for ibm z systems/7.0_s390x
• canonical/redhat enterprise linux for ibm z systems eus
• version/redhat enterprise linux for ibm z systems eus/6.7_s390x
• version/redhat enterprise linux for ibm z systems eus/7.2_s390x
• version/redhat enterprise linux for ibm z systems eus/7.3_s390x
• version/redhat enterprise linux for ibm z systems eus/7.4_s390x
• version/redhat enterprise linux for ibm z systems eus/7.5_s390x
• version/redhat enterprise linux for ibm z systems eus/7.6_s390x
• version/redhat enterprise linux for ibm z systems eus/7.7_s390x
• canonical/redhat enterprise linux for power big endian
• version/redhat enterprise linux for power big endian/6.0_ppc64
• version/redhat enterprise linux for power big endian/7.0_ppc64
• canonical/redhat enterprise linux for power big endian eus
• version/redhat enterprise linux for power big endian eus/6.7_ppc64
• version/redhat enterprise linux for power big endian eus/7.2_ppc64
• version/redhat enterprise linux for power big endian eus/7.3_ppc64
• version/redhat enterprise linux for power big endian eus/7.4_ppc64
• version/redhat enterprise linux for power big endian eus/7.5_ppc64
• version/redhat enterprise linux for power big endian eus/7.6_ppc64
• version/redhat enterprise linux for power big endian eus/7.7_ppc64
• canonical/redhat enterprise linux for power little endian
• version/redhat enterprise linux for power little endian/7.0_ppc64le
• canonical/redhat enterprise linux for power little endian eus
• version/redhat enterprise linux for power little endian eus/7.2_ppc64le
• version/redhat enterprise linux for power little endian eus/7.3_ppc64le
• version/redhat enterprise linux for power little endian eus/7.4_ppc64le
• version/redhat enterprise linux for power little endian eus/7.5_ppc64le
• version/redhat enterprise linux for power little endian eus/7.6_ppc64le
• version/redhat enterprise linux for power little endian eus/7.7_ppc64le
• version/redhat enterprise linux server aus/7.3
• version/redhat enterprise linux server aus/7.4
• version/redhat enterprise linux server aus/7.6
• version/redhat enterprise linux server aus/7.7
• canonical/redhat enterprise linux server from rhui
• version/redhat enterprise linux server from rhui/6.0
• version/redhat enterprise linux server from rhui/7.0
• canonical/redhat enterprise linux server tus
• version/redhat enterprise linux server tus/7.2
• version/redhat enterprise linux server tus/7.3
• version/redhat enterprise linux server tus/7.6
• version/redhat enterprise linux server tus/7.7
• vendor/oracle
• canonical/oracle linux
• version/oracle linux/6
• version/oracle linux/7
• canonical/oracle solaris
• version/oracle solaris/10
• version/oracle solaris/11.3
• vendor/suse
• canonical/suse linux enterprise debuginfo
• version/suse linux enterprise debuginfo/11-sp2
• version/suse linux enterprise debuginfo/11-sp3
• version/suse linux enterprise debuginfo/11-sp4
• canonical/suse manager
• version/suse manager/2.1
• canonical/suse manager proxy
• version/suse manager proxy/2.1
• canonical/suse openstack cloud
• version/suse openstack cloud/5
• vendor/opensuse
• canonical/opensuse leap
• version/opensuse leap/42.1
• canonical/opensuse opensuse
• version/opensuse opensuse/13.2
• canonical/suse linux enterprise desktop
• version/suse linux enterprise desktop/12
• version/suse linux enterprise desktop/12-sp1
• canonical/suse linux enterprise server
• version/suse linux enterprise server/11-sp2
• version/suse linux enterprise server/11-sp3
• version/suse linux enterprise server/11-sp4
• version/suse linux enterprise server/12
• version/suse linux enterprise server/12-sp1
• canonical/suse linux enterprise software development kit
• version/suse linux enterprise software development kit/11-sp4
• version/suse linux enterprise software development kit/12
• version/suse linux enterprise software development kit/12-sp1
• canonical/suse linux enterprise workstation extension
• version/suse linux enterprise workstation extension/12
• version/suse linux enterprise workstation extension/12-sp1