The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - It was discovered that ImageMagick did not properly     sanitize certain input before passing it to the     delegate functionality. A remote attacker could create     a specially crafted image that, when processed by an     application using ImageMagick or an unsuspecting user     using the ImageMagick utilities, would lead to     arbitrary execution of shell commands with the     privileges of the user running the     application.(CVE-2016-3714)

  - It was discovered that certain ImageMagick coders and     pseudo-protocols did not properly prevent security     sensitive operations when processing specially crafted     images. A remote attacker could create a specially     crafted image that, when processed by an application     using ImageMagick or an unsuspecting user using the     ImageMagick utilities, would allow the attacker to     delete, move, or disclose the contents of arbitrary     files. (CVE-2016-3715, CVE-2016-3716, CVE-2016-3717)

  - A server-side request forgery flaw was discovered in     the way ImageMagick processed certain images. A remote     attacker could exploit this flaw to mislead an     application using ImageMagick or an unsuspecting user     using the ImageMagick utilities into, for example,     performing HTTP(S) requests or opening FTP sessions via     specially crafted images. (CVE-2016-3718)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several vulnerabilities have been discovered in GraphicsMagick, a collection of image processing tool, which can cause denial of service attacks, remote file deletion, and remote command execution.

This security update removes the full support of PLT/Gnuplot decoder to prevent Gnuplot-shell based shell exploits for fixing the CVE-2016-3714 vulnerability.

The undocumented 'TMP' magick prefix no longer removes the argument file after it has been read for fixing the CVE-2016-3715 vulnerability. Since the 'TMP' feature was originally implemented, GraphicsMagick added a temporary file management subsystem which assures that temporary files are removed so this feature is not needed.

Remove support for reading input from a shell command, or writing output to a shell command, by prefixing the specified filename (containing the command) with a '|' for fixing the CVE-2016-5118 vulnerability.

  - CVE-2015-8808     Gustavo Grieco discovered an out of bound read in the     parsing of GIF files which may cause denial of service.

  - CVE-2016-2317     Gustavo Grieco discovered a stack-based buffer overflow     and two heap buffer overflows while processing SVG     images which may cause denial of service.

  - CVE-2016-2318     Gustavo Grieco discovered several segmentation faults     while processing SVG images which may cause denial of     service.

  - CVE-2016-5240     Gustavo Grieco discovered an endless loop problem caused     by negative stroke-dasharray arguments while parsing SVG     files which may cause denial of service.

  - CVE-2016-7800     Marco Grassi discovered an unsigned underflow leading to     heap overflow when parsing 8BIM chunk often attached to     JPG files which may cause denial of service.

  - CVE-2016-7996     Moshe Kaplan discovered that there is no check that the     provided colormap is not larger than 256 entries in the     WPG reader which may cause denial of service.

  - CVE-2016-7997     Moshe Kaplan discovered that an assertion is thrown for     some files in the WPG reader due to a logic error which     may cause denial of service.

  - CVE-2016-8682     Agostino Sarubbo of Gentoo discovered a stack buffer     read overflow while reading the SCT header which may     cause denial of service.

  - CVE-2016-8683     Agostino Sarubbo of Gentoo discovered a memory     allocation failure in the PCX coder which may cause     denial of service.

  - CVE-2016-8684     Agostino Sarubbo of Gentoo discovered a memory     allocation failure in the SGI coder which may cause     denial of service.

  - CVE-2016-9830     Agostino Sarubbo of Gentoo discovered a memory     allocation failure in MagickRealloc() function which may     cause denial of service.

The remote host is affected by the vulnerability described in GLSA-201611-21 (ImageMagick: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in ImageMagick.  Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Versions of WordPress prior to 4.5.2 are affected by multiple vulnerabilities :

 - A flaw exists that is triggered when using the 'ephemeral' pseudo protocol, which may allow a context-dependent attacker to delete arbitrary files.
 - A flaw exists in the 'ms' pseudo protocol that is triggered when moving image files. This may allow a context-dependent attacker to move arbitrary files to arbitrary locations.
 - A flaw exists in the 'label' pseudo protocol that is triggered during the handling of a specially crafted image. This may allow a context-dependent attacker to read arbitrary files.
 - A flaw known as 'ImageTragick' is triggered as shell characters are not properly filtered in filenames passed to delegate commands. This may allow a context-dependent attacker to inject arbitrary shell commands and subsequently execute arbitrary code.
 - 'MediaElement.js' contains a flaw that allows a reflected cross-site scripting (XSS) attack. The program does not validate input before returning it to users. This may allow a context-dependent attacker to create a specially crafted request that would execute arbitrary script code in a user's browser session within the trust relationship between their browser and the server.
 - Plupload contains an unspecified same-origin method execution flaw. No further details have been provided.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2990-1 advisory.

    Nikolay Ermishkin and Stewie discovered that ImageMagick incorrectly sanitized untrusted input. A remote     attacker could use these issues to execute arbitrary code. These issues are known as ImageTragick. This     update disables problematic coders via the /etc/ImageMagick-6/policy.xml configuration file. In certain     environments the coders may need to be manually re-enabled after making sure that ImageMagick does not     process untrusted input. (CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717, CVE-2016-3718)

    Bob Friesenhahn discovered that ImageMagick allowed injecting commands via an image file or filename. A     remote attacker could use this issue to execute arbitrary code. (CVE-2016-5118)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Several security vulnerabilities were discovered in graphicsmagick a tool to manipulate image files.

GraphicsMagick is a fork of ImageMagick and also affected by vulnerabilities collectively known as ImageTragick, that are the consequence of lack of sanitization of untrusted input. An attacker with control on the image input could, with the privileges of the user running the application, execute code (CVE-2016-3714), make HTTP GET or FTP requests (CVE-2016-3718), or delete (CVE-2016-3715), move (CVE-2016-3716), or read (CVE-2016-3717) local files.

To address these concerns the following changes have been made :

1. Remove automatic detection/execution of MVG based on file header or file extension.

2. Remove the ability to cause an input file to be deleted based on a filename specification.

3. Improve the safety of delegates.mgk by removing gnuplot support, removing manual page support, and by adding -dSAFER to all ghostscript invocations.

4. Sanity check the MVG image primitive filename argument to assure that 'magick:' prefix strings will not be interpreted. Please note that this patch will break intentional uses of magick prefix strings in MVG and so some MVG scripts may fail. We will search for a more flexible solution.

In addition the following issues have been fixed :

CVE-2015-8808 Assure that GIF decoder does not use unitialized data and cause an out-of-bound read.

CVE-2016-2317 and CVE-2016-2318 Vulnerabilities that allow to read or write outside memory bounds (heap, stack) as well as some NULL pointer derreferences to cause a denial of service when parsing SVG files.

For Debian 7 'Wheezy', these problems have been fixed in version 1.3.16-1.1+deb7u1.

We recommend that you upgrade your graphicsmagick packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Nikolay Ermishkin from the Mail.Ru Security Team and Stewie discovered several vulnerabilities in ImageMagick, a program suite for image manipulation. These vulnerabilities, collectively known as ImageTragick, are the consequence of lack of sanitization of untrusted input. An attacker with control on the image input could, with the privileges of the user running the application, execute code (CVE-2016-3714), make HTTP GET or FTP requests (CVE-2016-3718), or delete (CVE-2016-3715), move (CVE-2016-3716), or read (CVE-2016-3717) local files.

These vulnerabilities are particularly critical if Imagemagick processes images coming from remote parties, such as part of a web service.

The update disables the vulnerable coders (EPHEMERAL, URL, MVG, MSL, and PLT) and indirect reads via /etc/ImageMagick/policy.xml file. In addition, we introduce extra preventions, including some sanitization for input filenames in http/https delegates, the full remotion of PLT/Gnuplot decoder, and the need of explicit reference in the filename for the insecure coders.

For the wheezy, these problems have been fixed in version 8:6.7.7.10-5+deb7u5.

We recommend that you upgrade your imagemagick packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for GraphicsMagick fixes the following issues :

Security issues fixed :

  - Multiple security issues in GraphicsMagick/ImageMagick     [boo#978061] (CVE-2016-3714, CVE-2016-3718,     CVE-2016-3715, CVE-2016-3717)

Nikolay Ermishkin from the Mail.Ru Security Team and Stewie discovered several vulnerabilities in ImageMagick, a program suite for image manipulation. These vulnerabilities, collectively known as ImageTragick, are the consequence of lack of sanitization of untrusted input. An attacker with control on the image input could, with the privileges of the user running the application, execute code (CVE-2016-3714 ), make HTTP GET or FTP requests (CVE-2016-3718 ), or delete (CVE-2016-3715 ), move (CVE-2016-3716 ), or read (CVE-2016-3717 ) local files.

These vulnerabilities are particularly critical if Imagemagick processes images coming from remote parties, such as part of a web service.

The update disables the vulnerable coders (EPHEMERAL, URL, MVG, MSL, and PLT) and indirect reads via /etc/ImageMagick-6/policy.xml file. In addition, we introduce extra preventions, including some sanitization for input filenames in http/https delegates, the full remotion of PLT/Gnuplot decoder, and the need of explicit reference in the filename for the insecure coders.

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image. (CVE-2016-3715)

Note : This vulnerability is one of the series of vulnerabilities known as ImageTragick.

This update for ImageMagick fixes the following issues :

Security issues fixed :

  - Several coders were vulnerable to remote code execution     attacks, these coders have now been disabled. They can     be re-enabled by exporting the following environment     variable     MAGICK_CODER_MODULE_PATH=/usr/lib64/ImageMagick-6.4.3/mo     dules-Q16/coders/vu lnerable/ (bsc#978061)

  - CVE-2016-3714: Insufficient shell characters filtering     leads to (potentially remote) code execution

  - CVE-2016-3715: Possible file deletion by using     ImageMagick's 'ephemeral' pseudo protocol which deletes     files after reading.

  - CVE-2016-3716: Possible file moving by using     ImageMagick's 'msl' pseudo protocol with any extension     in any folder.

  - CVE-2016-3717: Possible local file read by using     ImageMagick's 'label' pseudo protocol to get content of     the files from the server.

  - CVE-2016-3718: Possible Server Side Request Forgery     (SSRF) to make HTTP GET or FTP request.

Bugs fixed :

  - Use external svg loader (rsvg)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its self-reported version number, the WordPress application running on the remote web server is prior to 4.5.2.
It is, therefore, affected by the following vulnerabilities :

  - A remote code execution vulnerability, known as     ImageTragick, exists in the ImageMagick library due to a     failure to properly filter shell characters in filenames     passed to delegate commands. A remote attacker can     exploit this, via specially crafted images, to inject     shell commands and execute arbitrary code.
    (CVE-2016-3714)

  - An unspecified flaw exists in the ImageMagick library in     the 'ephemeral' pseudo protocol that allows an attacker     to delete arbitrary files. (CVE-2016-3715)

  - An unspecified flaw exists in the ImageMagick library in     the 'ms' pseudo protocol that allows an attacker to move     arbitrary files to arbitrary locations. (CVE-2016-3716)

  - An unspecified flaw exists in the ImageMagick library in     the 'label' pseudo protocol that allows an attacker, via     a specially crafted image, to read arbitrary files.
    (CVE-2016-3717)

  - A server-side request forgery (SSRF) vulnerability     exists due to an unspecified flaw related to request     handling between a user and the server. A remote     attacker can exploit this, via an MVG file with a     specially crafted fill element, to bypass access     restrictions and conduct host-based attacks.
    (CVE-2016-3718)

  - An unspecified flaw exists in Plupload that allows an     attacker to perform a same-origin method execution.
    (CVE-2016-4566)

  - A reflected cross-site scripting vulnerability exists in     MediaElement.js due to improper validation of     user-supplied input. A context-dependent attacker can     exploit this, via a specially crafted request, to     execute arbitrary script code in a user's browser     session. (CVE-2016-4567)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It was discovered that ImageMagick did not properly sanitize certain input before passing it to the delegate functionality. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities, would lead to arbitrary execution of shell commands with the privileges of the user running the application.
(CVE-2016-3714)

It was discovered that certain ImageMagick coders and pseudo-protocols did not properly prevent security sensitive operations when processing specially crafted images. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities, would allow the attacker to disclose the contents of arbitrary files.
(CVE-2016-3715 , CVE-2016-3716 , CVE-2016-3717)

A server-side request forgery flaw was discovered in the way ImageMagick processed certain images. A remote attacker could exploit this flaw to mislead an application using ImageMagick or an unsuspecting user using the ImageMagick utilities into, for example, performing HTTP(S) requests or opening FTP sessions via specially crafted images. (CVE-2016-3718)

Note: This update contains an updated /etc/ImageMagick/policy.xml file that disables the EPHEMERAL, HTTPS, HTTP, URL, FTP, MVG, MSL, TEXT, and LABEL coders. If you experience any problems after the update, it may be necessary to manually adjust the policy.xml file to match your requirements. Please take additional precautions to ensure that your applications using the ImageMagick library do not process malicious or untrusted files before doing so.

New mozilla-thunderbird packages are available for Slackware 14.1 and
-current to fix security issues.

Security Fix(es) :

  - It was discovered that ImageMagick did not properly     sanitize certain input before passing it to the delegate     functionality. A remote attacker could create a     specially crafted image that, when processed by an     application using ImageMagick or an unsuspecting user     using the ImageMagick utilities, would lead to arbitrary     execution of shell commands with the privileges of the     user running the application. (CVE-2016-3714)

  - It was discovered that certain ImageMagick coders and     pseudo-protocols did not properly prevent security     sensitive operations when processing specially crafted     images. A remote attacker could create a specially     crafted image that, when processed by an application     using ImageMagick or an unsuspecting user using the     ImageMagick utilities, would allow the attacker to     delete, move, or disclose the contents of arbitrary     files. (CVE-2016-3715, CVE-2016-3716, CVE-2016-3717)

  - A server-side request forgery flaw was discovered in the     way ImageMagick processed certain images. A remote     attacker could exploit this flaw to mislead an     application using ImageMagick or an unsuspecting user     using the ImageMagick utilities into, for example,     performing HTTP(S) requests or opening FTP sessions via     specially crafted images. (CVE-2016-3718)

Note: This update contains an updated /etc/ImageMagick/policy.xml file that disables the EPHEMERAL, HTTPS, HTTP, URL, FTP, MVG, MSL, TEXT, and LABEL coders. If you experience any problems after the update, it may be necessary to manually adjust the policy.xml file to match your requirements. Please take additional precautions to ensure that your applications using the ImageMagick library do not process malicious or untrusted files before doing so.

An update for ImageMagick is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple image formats.

Security Fix(es) :

* It was discovered that ImageMagick did not properly sanitize certain input before passing it to the delegate functionality. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities, would lead to arbitrary execution of shell commands with the privileges of the user running the application.
(CVE-2016-3714)

* It was discovered that certain ImageMagick coders and pseudo-protocols did not properly prevent security sensitive operations when processing specially crafted images. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities, would allow the attacker to delete, move, or disclose the contents of arbitrary files. (CVE-2016-3715, CVE-2016-3716, CVE-2016-3717)

* A server-side request forgery flaw was discovered in the way ImageMagick processed certain images. A remote attacker could exploit this flaw to mislead an application using ImageMagick or an unsuspecting user using the ImageMagick utilities into, for example, performing HTTP(S) requests or opening FTP sessions via specially crafted images. (CVE-2016-3718)

Note: This update contains an updated /etc/ImageMagick/policy.xml file that disables the EPHEMERAL, HTTPS, HTTP, URL, FTP, MVG, MSL, TEXT, and LABEL coders. If you experience any problems after the update, it may be necessary to manually adjust the policy.xml file to match your requirements. Please take additional precautions to ensure that your applications using the ImageMagick library do not process malicious or untrusted files before doing so.

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-0726 advisory.

    [6.7.2.7-4]
    - Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716 and CVE-2016-3717

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for ImageMagick fixes the following issues :

Security issues fixed :

  - Several coders were vulnerable to remote code execution     attacks, these coders have now been disabled by default     but can be re-enabled by editing     '/etc/ImageMagick-*/policy.xml' (bsc#978061)

  - CVE-2016-3714: Insufficient shell characters filtering     leads to (potentially remote) code execution

  - CVE-2016-3715: Possible file deletion by using     ImageMagick's 'ephemeral' pseudo protocol which deletes     files after reading.

  - CVE-2016-3716: Possible file moving by using     ImageMagick's 'msl' pseudo protocol with any extension     in any folder.

  - CVE-2016-3717: Possible local file read by using     ImageMagick's 'label' pseudo protocol to get content of     the files from the server.

  - CVE-2016-3718: Possible Server Side Request Forgery     (SSRF) to make HTTP GET or FTP request.

Bugs fixed :

  - Use external svg loader (rsvg)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ImageMagick fixes the following issues :

Security issues fixed :

  - Several coders were vulnerable to remote code execution     attacks, these coders have now been disabled by default     but can be re-enabled by editing     '/etc/ImageMagick-*/policy.xml' (bsc#978061)

  - CVE-2016-3714: Insufficient shell characters filtering     leads to (potentially remote) code execution

  - CVE-2016-3715: Possible file deletion by using     ImageMagick's 'ephemeral' pseudo protocol which deletes     files after reading.

  - CVE-2016-3716: Possible file moving by using     ImageMagick's 'msl' pseudo protocol with any extension     in any folder.

  - CVE-2016-3717: Possible local file read by using     ImageMagick's 'label' pseudo protocol to get content of     the files from the server.

  - CVE-2016-3718: Possible Server Side Request Forgery     (SSRF) to make HTTP GET or FTP request.

Bugs fixed :

  - Use external svg loader (rsvg)

This update was imported from the SUSE:SLE-12:Update update project.

This update for ImageMagick fixes the following issues :

The update disables various insecure coders [boo#978061] These fix issues tracked in CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717, CVE-2016-3718

Openwall reports :

Insufficient filtering for filename passed to delegate's command allows remote code execution during conversion of several file formats. Any service which uses ImageMagick to process user-supplied images and uses default delegates.xml / policy.xml, may be vulnerable to this issue.

It is possible to make ImageMagick perform a HTTP GET or FTP request

It is possible to delete files by using ImageMagick's 'ephemeral' pseudo protocol which deletes files after reading.

It is possible to move image files to file with any extension in any folder by using ImageMagick's 'msl' pseudo protocol. msl.txt and image.gif should exist in known location - /tmp/ for PoC (in real life it may be web service written in PHP, which allows to upload raw txt files and process images with ImageMagick).

It is possible to get content of the files from the server by using ImageMagick's 'label' pseudo protocol.

The remote Windows host has a version of ImageMagick installed that is prior to 7.0.1-1 or 6.x prior to 6.9.3-10. It is, therefore, affected by the following vulnerabilities :

  - A remote code execution vulnerability, known as     ImageTragick, exists due to a failure to properly filter     shell characters in filenames passed to delegate     commands. A remote attacker can exploit this, via     specially crafted images, to inject shell commands and     execute arbitrary code. (CVE-2016-3714)

  - An unspecified flaw exists in the 'ephemeral' pseudo     protocol that allows an attacker to delete arbitrary     files. (CVE-2016-3715)

  - An unspecified flaw exists in the 'ms' pseudo protocol     that allows an attacker to move arbitrary files to     arbitrary locations. (CVE-2016-3716)

  - An unspecified flaw exists in the 'label' pseudo     protocol that allows an attacker, via a specially     crafted image, to read arbitrary files. (CVE-2016-3717)

  - A server-side request forgery (SSRF) vulnerability     exists due to an unspecified flaw related to request     handling between a user and the server. A remote     attacker can exploit this, via an MVG file with a     specially crafted fill element, to bypass access     restrictions and conduct host-based attacks.
    (CVE-2016-3718)

ID	Name	Product	Family	Severity
99784	EulerOS 2.0 SP1 : ImageMagick (EulerOS-SA-2016-1021)	Nessus	Huawei Local Security Checks	high
96103	Debian DSA-3746-1 : graphicsmagick - security update (ImageTragick)	Nessus	Debian Local Security Checks	critical
95420	GLSA-201611-21 : ImageMagick: Multiple vulnerabilities (ImageTragick)	Nessus	Gentoo Local Security Checks	high
9387	WordPress < 4.5.2 Multiple Vulnerabilities (ImageTragick)	Nessus Network Monitor	CGI	medium
91450	Ubuntu 14.04 LTS / 16.04 LTS : ImageMagick vulnerabilities (USN-2990-1)	Nessus	Ubuntu Local Security Checks	critical
91299	Debian DLA-484-1 : graphicsmagick security update (ImageTragick)	Nessus	Debian Local Security Checks	high
91287	Debian DLA-486-1 : imagemagick security update (ImageTragick)	Nessus	Debian Local Security Checks	high
91272	openSUSE Security Update : GraphicsMagick (openSUSE-2016-602) (ImageTragick)	Nessus	SuSE Local Security Checks	high
91175	Debian DSA-3580-1 : imagemagick - security update (ImageTragick)	Nessus	Debian Local Security Checks	high
91141	F5 Networks BIG-IP : ImageMagick vulnerability (K10550253)	Nessus	F5 Networks Local Security Checks	medium
91119	SUSE SLES11 Security Update : ImageMagick (SUSE-SU-2016:1275-1) (ImageTragick)	Nessus	SuSE Local Security Checks	high
91101	WordPress < 4.5.2 Multiple Vulnerabilities (ImageTragick)	Nessus	CGI abuses	high
91047	Amazon Linux AMI : ImageMagick (ALAS-2016-699) (ImageTragick)	Nessus	Amazon Linux Local Security Checks	high
91046	Slackware 14.0 / 14.1 / current : mozilla-thunderbird (SSA:2016-132-01) (ImageTragick)	Nessus	Slackware Local Security Checks	high
91039	Scientific Linux Security Update : ImageMagick on SL6.x, SL7.x i386/x86_64 (20160509) (ImageTragick)	Nessus	Scientific Linux Local Security Checks	high
91036	RHEL 6 / 7 : ImageMagick (RHSA-2016:0726) (ImageTragick)	Nessus	Red Hat Local Security Checks	high
91032	Oracle Linux 6 / 7 : ImageMagick (ELSA-2016-0726)	Nessus	Oracle Linux Local Security Checks	high
91020	CentOS 6 / 7 : ImageMagick (CESA-2016:0726) (ImageTragick)	Nessus	CentOS Local Security Checks	high
90996	SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2016:1260-1) (ImageTragick)	Nessus	SuSE Local Security Checks	high
90986	openSUSE Security Update : ImageMagick (openSUSE-2016-574) (ImageTragick)	Nessus	SuSE Local Security Checks	high
90981	openSUSE Security Update : ImageMagick (openSUSE-2016-569) (ImageTragick)	Nessus	SuSE Local Security Checks	high
90979	FreeBSD : ImageMagick -- multiple vulnerabilities (0d724b05-687f-4527-9c03-af34d3b094ec) (ImageTragick)	Nessus	FreeBSD Local Security Checks	high
90892	ImageMagick < 7.0.1-1 / 6.x < 6.9.3-10 Multiple Vulnerabilities (ImageTragick)	Nessus	Windows	high

Detections

Analytics

CVE-2016-3715

medium

Tenable Plugins

high

critical

high

medium

critical

high

high

high

high

medium

high

high

high

high

high

high

high

high

high

high

high

high

high