PT-2017-2442 · Imagemagick+4 · Imagemagick+4

Publicado 2016-05-06 · Atualizado 2018-08-04 · CVE-2016-5239

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.4-0 GraphicsMagick (affected versions not specified)

Description The issue is related to the gnuplot delegate functionality in ImageMagick and GraphicsMagick, which allows remote attackers to execute arbitrary commands via unspecified vectors. This is due to inadequate access control in the gnuplot component of the console graphic editor.

Recommendations For ImageMagick versions prior to 6.9.4-0, update to version 6.9.4-0 or later to resolve the issue. For GraphicsMagick, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

ALT-PU-2016-1456

BDU:2017-01647

CESA-2016_1237

CVE-2016-5239

DLA-1456-1

DLA-484-1

DLA-486-1

DSA-3580-1

RHSA-2016:1237

RHSA-2016_1237

Produtos afetados

Alt Linux

Centos

Graphicsmagick

Imagemagick

Red Hat

Referências · 23

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/fileformat/imagemagick_delegate.rb · Exploit
• 🔥 https://github.com/Hood3dRob1n/CVE-2016-3714 · Exploit
• 🔥 https://github.com/jpeanut/ImageTragick-CVE-2016-3714-RShell · Exploit
• 🔥 https://github.com/hexrom/ImageMagick-CVE-2017-15277 · Exploit
• 🔥 https://github.com/tacticthreat/ImageMagick-CVE-2017-15277 · Exploit
• 🔥 https://github.com/0xR0M/ImageMagick-CVE-2017-15277 · Exploit
• https://access.redhat.com/errata/RHSA-2016:1237 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2016/06/02/13 · Correção
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-5239 · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2016-1237.html · Aviso do Fabricante
• https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html · Nota
• http://git.imagemagick.org/repos/ImageMagick/commit/70a2cf326ed32bedee144b961005c63846541a16 · Correção
• http://oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html · Nota
• https://osv.dev/vulnerability/CVE-2016-5239 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-5239 · Aviso do Fabricante