CVE Catalog
CVE-2016-5118
CriticalSummary
The OpenBlob function in GraphicsMagick before version 1.3.24 and in ImageMagick allows remote attackers to execute arbitrary code by placing a | (pipe) character at the start of a filename.
Risk Assessment
An attacker can exploit this vulnerability to execute remote code, potentially leading to system compromise or data leakage.
Recommendation
It is recommended to update GraphicsMagick to version 1.3.24 or later and to monitor the usage of image processing functions.
Original NVD description (English source)
The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.