High 3 exploited CVEs ELSA-2016-0726 5 CVEs

Important: ImageMagick security update (Oracle Linux 7)

Published May 9, 2016 · Updated May 9, 2016

Ecosystem: Oracle Linux

Summary

[6.7.2.7-4]
- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716 and CVE-2016-3717

Fixed packages 6

Release	Package	Fixed in
Oracle Linux · 7	ImageMagick	0:6.7.8.9-13.el7_2
Oracle Linux · 7	ImageMagick-c++	0:6.7.8.9-13.el7_2
Oracle Linux · 7	ImageMagick-c++-devel	0:6.7.8.9-13.el7_2
Oracle Linux · 7	ImageMagick-devel	0:6.7.8.9-13.el7_2
Oracle Linux · 7	ImageMagick-doc	0:6.7.8.9-13.el7_2
Oracle Linux · 7	ImageMagick-perl	0:6.7.8.9-13.el7_2

Vulnerabilities 5

High 8.4

CVE-2016-3714 Exploited Public exploit EPSS 97%

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6…

imagemagick imagemagick graphicsmagick graphicsmagick Debian Ubuntu

May 5, 2016
KEV Sep 9, 2024
Medium 5.5

CVE-2016-3715 Exploited Public exploit EPSS 75%

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary f…

imagemagick imagemagick graphicsmagick graphicsmagick Debian Ubuntu

May 5, 2016
KEV Nov 3, 2021
Medium 5.5

CVE-2016-3718 Exploited Public exploit EPSS 76%

The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct…

imagemagick imagemagick graphicsmagick graphicsmagick Debian Ubuntu

May 5, 2016
KEV Nov 3, 2021
Unscored —

CVE-2016-3716 Public exploit EPSS 11%

The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via…

imagemagick imagemagick graphicsmagick graphicsmagick Debian Ubuntu

May 5, 2016
Unscored —

CVE-2016-3717 Public exploit EPSS 20%

The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files v…

imagemagick imagemagick graphicsmagick graphicsmagick Debian Ubuntu

May 5, 2016