ImageMagick TIFF File Remote Code Execution Vulnerability

Last Update Date: 8 Dec 2016 09:34 Release Date: 8 Dec 2016 4089 Views

RISK: Medium Risk

TYPE: Web services - Web Servers

An remote code execution vulnerability on TIFF file has been identified in ImageMagick, which could be exploited by remoter attacker to execute arbitrary code on target system.

Impact

Remote Code Execution

System / Technologies affected

Versions prior to 7.0.3-9

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix (7.0.3-9)

Vulnerability Identifier

CVE-2016-8707

Source

CNCERT