MGASA-2016-0257: converseen Mageia

CVSS: UnknownPublished
Published 19-07-2016Last modified 16-04-2026
Open JSON

Vulnerability summary

MGASA-2016-0257 is a vulnerability in converseen Mageia with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 3 · Downstream 0
CVE-2016-5118CVE-2016-5841CVE-2016-5842

Timeline

  1. 19-07-2016
    PublishedVulnerability first disclosed.
  2. 16-04-2026
    Last modifiedVulnerability information updated.

Description

Updated imagemagick packages fix security vulnerabilities Updated imagemagick package fixes security vulnerabilities: The OpenBlob function in blob.c in ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename (CVE-2016-5118). Integer overflow in MagickCore/profile.c (CVE-2016-5841). Buffer overread in MagickCore/property.c (CVE-2016-5842). Also, several packages have been rebuilt to use the updated Magick++-6.Q16 library. These include converseen, cuneiform-linux, inkscape, k3d, kcm-grub2, kxstitch, performous, perl-Image-SubImageFind, pfstools, pstoedit, pythonmagick, synfig, vdr-plugin-skinelchi, and vdr-plugin-skinenigmang.

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Mageia15 products
  • converseen< 0.8.3-3.1.mga5
  • cuneiform-linux< 1.1.0-6.1.mga5
  • imagemagick< 6.9.5.2-1.mga5
  • inkscape< 0.91-1.1.mga5
  • k3d< 0.8.0.2-10.1.mga5

1 vendor · 15 products

References

6 links