PT-2017-2442 · Imagemagick+4 · Imagemagick+4

Published 2016-05-06 · Updated 2018-08-04 · CVE-2016-5239

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.4-0 GraphicsMagick (affected versions not specified)

Description The issue is related to the gnuplot delegate functionality in ImageMagick and GraphicsMagick, which allows remote attackers to execute arbitrary commands via unspecified vectors. This is due to inadequate access control in the gnuplot component of the console graphic editor.

Recommendations For ImageMagick versions prior to 6.9.4-0, update to version 6.9.4-0 or later to resolve the issue. For GraphicsMagick, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

ALT-PU-2016-1456

BDU:2017-01647

CESA-2016_1237

CVE-2016-5239

DLA-1456-1

DLA-484-1

DLA-486-1

DSA-3580-1

RHSA-2016:1237

RHSA-2016_1237

Affected Products

Alt Linux

Centos

Graphicsmagick

Imagemagick

Red Hat

References · 23

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/fileformat/imagemagick_delegate.rb · Exploit
• 🔥 https://github.com/Hood3dRob1n/CVE-2016-3714 · Exploit
• 🔥 https://github.com/jpeanut/ImageTragick-CVE-2016-3714-RShell · Exploit
• 🔥 https://github.com/hexrom/ImageMagick-CVE-2017-15277 · Exploit
• 🔥 https://github.com/tacticthreat/ImageMagick-CVE-2017-15277 · Exploit
• 🔥 https://github.com/0xR0M/ImageMagick-CVE-2017-15277 · Exploit
• https://access.redhat.com/errata/RHSA-2016:1237 · Vendor Advisory
• http://openwall.com/lists/oss-security/2016/06/02/13 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-5239 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2016-1237.html · Vendor Advisory
• http://git.imagemagick.org/repos/ImageMagick/commit/70a2cf326ed32bedee144b961005c63846541a16 · Patch
• https://osv.dev/vulnerability/CVE-2016-5239 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-5239 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-5239 · Security Note
• https://bdu.fstec.ru/vul/2017-01647 · Security Note