CVE-2016-3715 — ImageMagick Arbitrary File Deletion Vulnerability

provenance: imported · CVE: CVE-2016-3715

CVE-2016-3715: ImageMagick Arbitrary File Deletion Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	ImageMagick
Product	ImageMagick
Date added	2021-11-03
Due date	2022-05-03
Ransomware campaign use	Unknown

Description

ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2016-3715

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-3715
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog