CVE-2016-10048

Name of the Vulnerable Software and Affected Versions ImageMagick versions 6.9.4-7

Description The issue is related to a directory traversal vulnerability in the magick/module.c component of ImageMagick, which can be exploited by remote attackers to load arbitrary modules via unspecified vectors. This vulnerability is associated with insufficient restrictions on directory path names.

Recommendations For ImageMagick versions 6.9.4-7, consider restricting access to the magick/module.c component to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the vulnerable module in sensitive operations. At the moment, there is no information about a newer version that contains a fix for this vulnerability.