ImageMagick 3

Organization

CVE-2016-3714: Image Magick Improper Input Validation Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Sep 09, 2024

ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders. This allows a remote attacker to execute arbitrary code via shell metacharacters in a crafted image.

Vulnerabilities & Patching

CVE-2016-3718: Image Magick Server-Side Request Forgery (SSRF) Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Nov 03, 2021

ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image.

Vulnerabilities & Patching

CVE-2016-3715: Image Magick Arbitrary File Deletion Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Nov 03, 2021

ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.

Vulnerabilities & Patching