CVE:CVE-2016-5118
CNNVD:CNNVD-201605-686
GraphicsMagick是一套简单的图像处理工具，该工具对图像提供尺寸调整、旋转、加亮等功能。ImageMagick是美国ImageMagick Studio公司的一套开源的图象处理软件，该软件可读取、转换、写入多种格式的图片。
GraphicsMagick 1.3.24之前版本和ImageMagick的blob.c文件中的‘OpenBlob’函数中存在安全漏洞。远程攻击者可借助文件名开始的‘|’字符利用该漏洞执行shell代码。
solution:Upgrade graphicsmagick graphicsmagick to a higher version than 1.3.23,and avoid the version (,1.3.23]; Upgrade suse linux_enterprise_debuginfo to a higher version than 11:sp4,and avoid the version 11:sp4; Upgrade suse studio_onsite to a higher version than 1.3,and avoid the version 1.3; Upgrade suse linux_enterprise_software_development_kit to a higher version than 11:sp4,12,12.0:sp1,and avoid the version 11:sp4,12,12.0:sp1; Upgrade oracle solaris to a higher version than 10,11.3,and avoid the version 10,11.3; Upgrade oracle linux to a higher version than 6,7,and avoid the version 6,7; Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade opensuse opensuse to a higher version than 13.2,and avoid the version 13.2; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.10,16.04,and avoid the version 12.04,14.04,15.10,16.04; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade suse linux_enterprise_desktop to a higher version than 12,12.0:sp1,and avoid the version 12,12.0:sp1; Upgrade suse linux_enterprise_server to a higher version than 12,12.0:sp1,and avoid the version 12,12.0:sp1; Upgrade suse linux_enterprise_workstation_extension to a higher version than 12,12:sp1,and avoid the version 12,12:sp1; Upgrade imagemagick imagemagick to a higher version than -