CVE-2016-3717
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
ImageMagick是美国ImageMagick公司的一套开源的图像处理软件。该软件可读取、转换或写入多种格式的图片。 ImageMagick 6.9.3-10之前版本和7.0.1-1之前7.x版本存在信息泄露漏洞。远程攻击者可借助特制的图像利用该漏洞读取任意文件。
Public Exploits 1
ExploitDB · 1
EDB-39767#CVE-2016-3717 [dos]
Possible ATT&CK Techniques 1 AI
T1005 · Data from Local System
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2016-3717
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
ImageMagick 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ImageMagick是美国ImageMagick公司的一套开源的图像处理软件。该软件可读取、转换或写入多种格式的图片。 ImageMagick 6.9.3-10之前版本和7.0.1-1之前7.x版本存在信息泄露漏洞。远程攻击者可借助特制的图像利用该漏洞读取任意文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2016-3717
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2016-3717
请登录查看更多情报信息。
Vendor Advisories for CVE-2016-3717 (5)
Exploits & Public PoCs for CVE-2016-3717 (1)
Mailing List Discussions for CVE-2016-3717 (7)
-
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html vendor-advisory x_refsource_SUSE
-
-
Other References for CVE-2016-3717 (6)
-
https://www.imagemagick.org/script/changelog.php x_refsource_CONFIRM
-
http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html x_refsource_CONFIRM
-
https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588 x_refsource_CONFIRM
-
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568 vendor-advisory x_refsource_SLACKWARE
Same Patch Batch · n/a · 2016-05-05 · 25 CVEs total
| CVE-2016-3718 | ImageMagick 输入验证错误漏洞 | |
| CVE-2016-2176 | OpenSSL 安全漏洞 | |
| CVE-2016-2109 | OpenSSL ASN.1 BIO实现拒绝服务漏洞 | |
| CVE-2016-2108 | OpenSSL ASN.1实现拒绝服务漏洞 | |
| CVE-2016-2107 | OpenSSL AES-NI实现安全漏洞 | |
| CVE-2016-2106 | OpenSSL 整数溢出漏洞 | |
| CVE-2016-2105 | OpenSSL 整数溢出漏洞 | |
| CVE-2000-1254 | OpenSSL 安全漏洞 | |
| CVE-2016-4535 | McAfee LiveSafe AV引擎整数符号错误漏洞 | |
| CVE-2016-4534 | McAfee VirusScan Enterprise Console 安全漏洞 | |
| CVE-2016-4351 | Trend Micro Email Encryption SQL注入漏洞 | |
| CVE-2016-4008 | GNU Libtasn1 拒绝服务漏洞 | |
| CVE-2016-1368 | Cisco FirePOWER System Software 拒绝服务漏洞 | |
| CVE-2016-3716 | ImageMagick 权限许可和访问控制问题漏洞 | |
| CVE-2016-3715 | ImageMagick 访问控制错误漏洞 | |
| CVE-2016-3714 | ImageMagick 输入验证错误漏洞 | |
| CVE-2016-2168 | Apache Subversion httpd服务器拒绝服务漏洞 | |
| CVE-2016-2167 | Apache Subversion 访问控制错误漏洞 | |
| CVE-2016-2062 | Linux kernel 输入验证错误漏洞 | |
| CVE-2016-2059 | Linux kernel 权限许可和访问控制问题漏洞 |
Showing top 20 of 25 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
-
CVE-2026-112100
DeepPavlov multitask_preprocessor.py MultiTaskPipelinePrepro -
CVE-2026-112098
DeepPavlov Config Reference Resolver params.py resolve code -
CVE-2026-112086
ESPnet Inference Model inference_model.py build_model deseri -
CVE-2026-112045
donetick History Deletion model.go CanDeleteHistory improper -
CVE-2026-111874
OpenCATS Career Portal CareersUI.php processLogin excessive
V. Comments for CVE-2016-3717
No comments yet