The MSL coder in ImageMagick before 6
The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image.
Exploitability
AV:L
AC:L
PR:N
UI:R
Scope
S:U
Impact
C:N
I:L
A:N
3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N