The gnuplot delegate functionality in ImageMagick before 6.9.4-0 and GraphicsMagick allows remote attackers to execute arbitrary commands via unspecified vectors.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-516:02 advisory.

    ImageMagick is an image display and manipulation tool for the X     Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF,     and Photo CD image formats. It can resize, rotate, sharpen, color     reduce, or add special effects to an image, and when finished you can     either save the completed work in the original format or a different     one. ImageMagick also includes command line programs for creating     animated or transparent .gifs, creating composite images, creating     thumbnail images, and more.
    ImageMagick is one of your choices if you need a program to manipulate     and display images. If you want to develop your own applications     which use ImageMagick code or APIs, you need to install     ImageMagick-devel as well.
    Security issues fixed with this release:
    CVE-2015-8895
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2015-8896
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2015-8897
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2015-8898
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2016-5118     The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and     ImageMagick allows remote attackers to execute arbitrary code via a |     (pipe) character at the start of a filename.
    CVE-2016-5239
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2016-5240
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-519:03 advisory.

    ImageMagick is an image display and manipulation tool for the X     Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF,     and Photo CD image formats. It can resize, rotate, sharpen, color     reduce, or add special effects to an image, and when finished you can     either save the completed work in the original format or a different     one. ImageMagick also includes command line programs for creating     animated or transparent .gifs, creating composite images, creating     thumbnail images, and more.
    ImageMagick is one of your choices if you need a program to manipulate     and display images. If you want to develop your own applications     which use ImageMagick code or APIs, you need to install     ImageMagick-devel as well.
    Security issues fixed with this release:
    CVE-2015-8895
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2015-8896
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2015-8897
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2015-8898
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2016-5118     The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and     ImageMagick allows remote attackers to execute arbitrary code via a |     (pipe) character at the start of a filename.
    CVE-2016-5239
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2016-5240
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Various vulnerabilities were discovered in graphicsmagick, a collection of image processing tools and associated libraries, resulting in denial of service, information disclosure, and a variety of buffer overflows and overreads.

For Debian 8 'Jessie', these problems have been fixed in version 1.3.20-3+deb8u4.

We recommend that you upgrade your graphicsmagick packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - It was discovered that ImageMagick did not properly     sanitize certain input before using it to invoke     processes. A remote attacker could create a specially     crafted image that, when processed by an application     using ImageMagick or an unsuspecting user using the     ImageMagick utilities, would lead to arbitrary     execution of shell commands with the privileges of the     user running the application.(CVE-2016-5118)

  - It was discovered that ImageMagick did not properly     sanitize certain input before passing it to the gnuplot     delegate functionality. A remote attacker could create     a specially crafted image that, when processed by an     application using ImageMagick or an unsuspecting user     using the ImageMagick utilities, would lead to     arbitrary execution of shell commands with the     privileges of the user running the application.
    (CVE-2016-5239)

  - Multiple flaws have been discovered in ImageMagick. A     remote attacker could, for example, create specially     crafted images that, when processed by an application     using ImageMagick or an unsuspecting user using the     ImageMagick utilities, would result in a memory     corruption and, potentially, execution of arbitrary     code, a denial of service, or an application crash.
    (CVE-2015-8896, CVE-2015-8895, CVE-2016-5240,     CVE-2015-8897, CVE-2015-8898)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that ImageMagick did not properly sanitize certain input before using it to invoke processes. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities, would lead to arbitrary execution of shell commands with the privileges of the user running the application.
(CVE-2016-5118)

It was discovered that ImageMagick did not properly sanitize certain input before passing it to the gnuplot delegate functionality. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities, would lead to arbitrary execution of shell commands with the privileges of the user running the application. (CVE-2016-5239)

Multiple flaws have been discovered in ImageMagick. A remote attacker could, for example, create specially crafted images that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities, would result in a memory corruption and, potentially, execution of arbitrary code, a denial of service, or an application crash. (CVE-2015-8896 , CVE-2015-8895 , CVE-2016-5240 , CVE-2015-8897 , CVE-2015-8898)

Security Fix(es) :

  - It was discovered that ImageMagick did not properly     sanitize certain input before using it to invoke     processes. A remote attacker could create a specially     crafted image that, when processed by an application     using ImageMagick or an unsuspecting user using the     ImageMagick utilities, would lead to arbitrary execution     of shell commands with the privileges of the user     running the application. (CVE-2016-5118)

  - It was discovered that ImageMagick did not properly     sanitize certain input before passing it to the gnuplot     delegate functionality. A remote attacker could create a     specially crafted image that, when processed by an     application using ImageMagick or an unsuspecting user     using the ImageMagick utilities, would lead to arbitrary     execution of shell commands with the privileges of the     user running the application. (CVE-2016-5239)

  - Multiple flaws have been discovered in ImageMagick. A     remote attacker could, for example, create specially     crafted images that, when processed by an application     using ImageMagick or an unsuspecting user using the     ImageMagick utilities, would result in a memory     corruption and, potentially, execution of arbitrary     code, a denial of service, or an application crash.
    (CVE-2015-8896, CVE-2015-8895, CVE-2016-5240,     CVE-2015-8897, CVE-2015-8898)

An update for ImageMagick is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

[Updated 18 July 2016] This advisory has been updated to push packages into the Red Hat Enterprise Linux 6 Desktop channels. The packages included in this revised update have not been changed in any way from the packages included in the original advisory.

ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple image formats.

Security Fix(es) :

* It was discovered that ImageMagick did not properly sanitize certain input before using it to invoke processes. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities, would lead to arbitrary execution of shell commands with the privileges of the user running the application.
(CVE-2016-5118)

* It was discovered that ImageMagick did not properly sanitize certain input before passing it to the gnuplot delegate functionality. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities, would lead to arbitrary execution of shell commands with the privileges of the user running the application. (CVE-2016-5239)

* Multiple flaws have been discovered in ImageMagick. A remote attacker could, for example, create specially crafted images that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities, would result in a memory corruption and, potentially, execution of arbitrary code, a denial of service, or an application crash. (CVE-2015-8896, CVE-2015-8895, CVE-2016-5240, CVE-2015-8897, CVE-2015-8898)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1237 advisory.

    [6.7.2.7-5]
    - Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716 and CVE-2016-3717

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
289393	MiracleLinux 4 : ImageMagick-6.7.2.7-5.AXS4 (AXSA:2016-516:02)	Nessus	Miracle Linux Local Security Checks	critical
289192	MiracleLinux 7 : ImageMagick-6.7.8.9-15.el7 (AXSA:2016-519:03)	Nessus	Miracle Linux Local Security Checks	critical
111520	Debian DLA-1456-1 : graphicsmagick security update	Nessus	Debian Local Security Checks	critical
99792	EulerOS 2.0 SP1 : ImageMagick (EulerOS-SA-2016-1029)	Nessus	Huawei Local Security Checks	critical
91768	Amazon Linux AMI : ImageMagick (ALAS-2016-716)	Nessus	Amazon Linux Local Security Checks	critical
91712	Scientific Linux Security Update : ImageMagick on SL6.x, SL7.x i386/x86_64 (20160617)	Nessus	Scientific Linux Local Security Checks	critical
91642	RHEL 6 / 7 : ImageMagick (RHSA-2016:1237)	Nessus	Red Hat Local Security Checks	critical
91641	Oracle Linux 6 / 7 : ImageMagick (ELSA-2016-1237)	Nessus	Oracle Linux Local Security Checks	critical
91636	CentOS 6 / 7 : ImageMagick (CESA-2016:1237)	Nessus	CentOS Local Security Checks	critical

Detections

Analytics

CVE-2016-5239

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical