CVE-2016-5118
Beschrijving
The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.
Vendors
Affected products
References
- git.imagemagick.org
- hg.code.sf.net
- hg.code.sf.net
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- www.debian.org
- www.debian.org
- www.openwall.com
- www.openwall.com
- www.oracle.com
- www.oracle.com
- www.securityfocus.com
- www.securitytracker.com
- www.securitytracker.com
- www.slackware.com