CVE ID:	CVE-2016-5118
Description:	The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.
Test IDs:	1.3.6.1.4.1.25623.1.0.851330   1.3.6.1.4.1.25623.1.0.851338   1.3.6.1.4.1.25623.1.0.851350   1.3.6.1.4.1.25623.1.0.851327   1.3.6.1.4.1.25623.1.0.703591   1.3.6.1.4.1.25623.1.0.808248   1.3.6.1.4.1.25623.1.0.851328   1.3.6.1.4.1.25623.1.0.120706   1.3.6.1.4.1.25623.1.0.703746   1.3.6.1.4.1.25623.1.1.4.2016.1570.1   1.3.6.1.4.1.25623.1.1.4.2016.1610.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-5118 BugTraq ID: 90938 http://www.securityfocus.com/bid/90938 Debian Security Information: DSA-3591 (Google Search) http://www.debian.org/security/2016/dsa-3591 Debian Security Information: DSA-3746 (Google Search) http://www.debian.org/security/2016/dsa-3746 http://www.openwall.com/lists/oss-security/2016/05/29/7 http://www.openwall.com/lists/oss-security/2016/05/30/1 RedHat Security Advisories: RHSA-2016:1237 https://access.redhat.com/errata/RHSA-2016:1237 http://www.securitytracker.com/id/1035984 http://www.securitytracker.com/id/1035985 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.397749 SuSE Security Announcement: SUSE-SU-2016:1570 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00021.html SuSE Security Announcement: SUSE-SU-2016:1610 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00030.html SuSE Security Announcement: SUSE-SU-2016:1614 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00032.html SuSE Security Announcement: openSUSE-SU-2016:1521 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00008.html SuSE Security Announcement: openSUSE-SU-2016:1522 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00009.html SuSE Security Announcement: openSUSE-SU-2016:1534 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00011.html SuSE Security Announcement: openSUSE-SU-2016:1653 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00047.html http://www.ubuntu.com/usn/USN-2990-1