CVE-2016-5239

Critical

Published: 15/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The gnuplot delegate functionality in ImageMagick before version 6.9.4-0 and in GraphicsMagick allows remote attackers to execute arbitrary commands via unspecified vectors.

Risk Assessment

Attackers can exploit this vulnerability to execute code remotely, potentially leading to system compromise or data leakage.

Recommendation

It is recommended to update ImageMagick to version 6.9.4-0 or later and to monitor systems for unauthorized activities.

Original NVD description (English source)

The gnuplot delegate functionality in ImageMagick before 6.9.4-0 and GraphicsMagick allows remote attackers to execute arbitrary commands via unspecified vectors.