CVE:CVE-2016-3718
CNNVD:CNNVD-201605-102
ImageMagick是美国ImageMagick公司的一套开源的图像处理软件。该软件可读取、转换或写入多种格式的图片。
ImageMagick 6.9.3-10之前版本和7.0.1-1之前7.x版本存在输入验证错误漏洞。远程攻击者可借助特制的图像利用该漏洞实施服务器端请求伪造攻击。
solution:Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.10,16.04,and avoid the version 12.04,14.04,15.10,16.04; Upgrade imagemagick imagemagick to a higher version than 6.9.3-9,7.0.0-0,7.0.1-0,and avoid the version (,6.9.3-9],7.0.0-0,7.0.1-0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_hpc_node to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_hpc_node_eus to a higher version than 7.2,and avoid the version 7.2; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.2,and avoid the version 7.2; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.2,and avoid the version 7.2; Upgrade redhat enterprise_linux_server_supplementary_eus to a higher version than 6.7z,and avoid the version 6.7z; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0