| Package | Affected versions | Patched versions |
|---|---|---|
| graphicsmagick | ≤ 1.3.23 | |
| imagemagick | < 7.0.1-7 | 7.0.1-7 |
| linux enterprise debuginfo | = 11 | |
| studio onsite | = 1.3 |
The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free