# CVE-2016-3715

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

- Page: https://www.vulneraibility.com/cve/CVE-2016-3715
- CVSS: 5.5
- Known exploited: yes, in CISA KEV since 2021-11-03; CISA due date 2022-05-03
- EPSS: 75.31% (percentile 99.5)
- Public exploit code: 1 on Exploit-DB (first 2016-05-04)
- CISA SSVC: exploitation active, automatable no, technical impact partial (assessed 2025-02-07)
- Weakness: CWE-552
- Published: 2016-05-05

## Affected

- redhat:enterprise_linux_desktop
- redhat:enterprise_linux_eus
- redhat:enterprise_linux_for_ibm_z_systems
- redhat:enterprise_linux_for_ibm_z_systems_eus
- redhat:enterprise_linux_for_power_big_endian
- redhat:enterprise_linux_for_power_big_endian_eus
- redhat:enterprise_linux_for_power_little_endian
- redhat:enterprise_linux_for_power_little_endian_eus
- redhat:enterprise_linux_hpc_node
- redhat:enterprise_linux_hpc_node_eus
- redhat:enterprise_linux_server
- redhat:enterprise_linux_server_aus
- redhat:enterprise_linux_server_from_rhui
- redhat:enterprise_linux_server_supplementary_eus
- redhat:enterprise_linux_server_tus
- redhat:enterprise_linux_workstation
- imagemagick:imagemagick
- canonical:ubuntu_linux
- oracle:linux
- oracle:solaris
- suse:linux_enterprise_debuginfo
- suse:manager
- suse:manager_proxy
- suse:openstack_cloud
- opensuse:leap
- opensuse:opensuse
- suse:linux_enterprise_desktop
- suse:linux_enterprise_server
- suse:linux_enterprise_software_development_kit
- suse:linux_enterprise_workstation_extension

## References

- [other] http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog
- [advisory] http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html
- [other] http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- [other] https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588
- [advisory] http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html
- [advisory] http://www.ubuntu.com/usn/USN-2990-1
- [advisory] http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html
- [other] http://www.securityfocus.com/archive/1/538378/100/0/threaded
- [exploit] https://www.exploit-db.com/exploits/39767/
- [advisory] http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html
- [other] http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
- [other] http://www.openwall.com/lists/oss-security/2016/05/03/18
- [advisory] http://www.debian.org/security/2016/dsa-3746
- [advisory] https://security.gentoo.org/glsa/201611-21
- [advisory] http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html
- [advisory] http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568
- [other] https://www.imagemagick.org/script/changelog.php
- [advisory] http://www.debian.org/security/2016/dsa-3580
- [advisory] http://rhn.redhat.com/errata/RHSA-2016-0726.html
- [other] http://www.securityfocus.com/bid/89852
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3715

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.