CVE:CVE-2016-3716
CNNVD:CNNVD-201605-103
ImageMagick是美国ImageMagick公司的一套开源的图像处理软件。该软件可读取、转换或写入多种格式的图片。
ImageMagick 6.9.3-10之前版本和7.0.1-1之前7.x版本存在权限许可和访问控制问题漏洞。远程攻击者可借助特制的图像利用该漏洞移动任意文件。
solution:Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.10,16.04,and avoid the version 12.04,14.04,15.10,16.04; Upgrade imagemagick imagemagick to a higher version than 6.9.3-9,7.0.0-0,7.0.1-0,and avoid the version (,6.9.3-9],7.0.0-0,7.0.1-0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_hpc_node to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_hpc_node_eus to a higher version than 7.2,and avoid the version 7.2; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.2,and avoid the version 7.2; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.2,and avoid the version 7.2; Upgrade redhat enterprise_linux_server_supplementary_eus to a higher version than 6.7z,and avoid the version 6.7z; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0