suse · CVE-2016-3716

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2016-3716 severity moderate: SUSE including 172 source package names (ImageMagick, ImageMagick-6.4.3.6-7.34.1, …), 332 product×package rows across 78 product lines (HPE Helion OpenStack 8, SUSE Liberty Linux 7, … (78 product lines)): Fixed 253, Known Not Affected 79.

Description:

The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image.