The gnuplot delegate functionality in ImageMagick before 6.9.4-0 and GraphicsMagick allows remote attackers to execute arbitrary commands via unspecified vectors.
{
"unresolved_ranges": [
{
"vendor_product": "imagemagick:imagemagick",
"extracted_events": [
{
"last_affected": "6.9.3-9"
},
{
"last_affected": "6.9.3-9"
}
],
"cpes": [
"cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*"
],
"source": "CPE_RANGE"
}
]
}