CVE-2016-5239

The gnuplot delegate functionality in ImageMagick before 6.9.4-0 and GraphicsMagick allows remote attackers to execute arbitrary commands via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
VendorProductVersion
imagemagickimagemagick
𝑥
≤ 6.9.3-9
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
graphicsmagick
bullseye (security)
1.4+really1.3.36+hg16481-2+deb11u1
fixed
bullseye
1.4+really1.3.36+hg16481-2+deb11u1
fixed
bookworm
1.4+really1.3.40-4
fixed
sid
1.4+really1.3.45-1
fixed
trixie
1.4+really1.3.45-1
fixed
imagemagick
bullseye
8:6.9.11.60+dfsg-1.3+deb11u4
fixed
bullseye (security)
8:6.9.11.60+dfsg-1.3+deb11u3
fixed
bookworm
8:6.9.11.60+dfsg-1.6+deb12u2
fixed
bookworm (security)
8:6.9.11.60+dfsg-1.6+deb12u1
fixed
trixie
8:6.9.13.12+dfsg1-1
fixed
sid
8:7.1.1.39+dfsg1-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
graphicsmagick
cosmic
not-affected
bionic
not-affected
artful
not-affected
zesty
not-affected
yakkety
not-affected
xenial
Fixed 1.3.23-1ubuntu0.1
released
wily
ignored
trusty
Fixed 1.3.18-1ubuntu3.1
released
precise
ignored
imagemagick
cosmic
Fixed 8:6.8.9.9-7ubuntu7
released
bionic
Fixed 8:6.8.9.9-7ubuntu7
released
artful
Fixed 8:6.8.9.9-7ubuntu7
released
zesty
Fixed 8:6.8.9.9-7ubuntu7
released
yakkety
Fixed 8:6.8.9.9-7ubuntu7
released
xenial
Fixed 8:6.8.9.9-7ubuntu5.1
released
wily
ignored
trusty
Fixed 8:6.7.7.10-6ubuntu3.1
released
precise
Fixed 8:6.6.9.7-5ubuntu3.4
released
Common Weakness Enumeration
References
http://git.imagemagick.org/repos/ImageMagick/commit/70a2cf326ed32bedee144b961005c63846541a16
http://www.openwall.com/lists/oss-security/2016/06/02/13
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
http://www.securityfocus.com/bid/91018
https://access.redhat.com/errata/RHSA-2016:1237
https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html
http://git.imagemagick.org/repos/ImageMagick/commit/70a2cf326ed32bedee144b961005c63846541a16
http://www.openwall.com/lists/oss-security/2016/06/02/13
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
http://www.securityfocus.com/bid/91018
https://access.redhat.com/errata/RHSA-2016:1237
https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html