290 matches found
Exploit for Code Injection in Exiftool_Project Exiftool
CVE-2021-22204 - Exiftool Remote Code Execution Descriptio...
Updated perl-Image-ExifTool package fixes a security vulnerability
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image CVE-2021-22204...
MGASA-2021-0259 Updated perl-Image-ExifTool package fixes a security vulnerability
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image CVE-2021-22204...
Ubuntu: Security Advisory (USN-4987-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4987-1 libimage-exiftool-perl vulnerability
It was discovered that ExifTool did not properly sanitize user data for the DjVu file format. An attacker could use this vulnerability to cause a DoS or possibly execute arbitrary code...
USN-4987-1: ExifTool vulnerability
It was discovered that ExifTool did not properly sanitize user data for the DjVu file format. An attacker could use this vulnerability to cause a DoS or possibly execute arbitrary code...
Ubuntu 18.04 LTS / 20.04 LTS : ExifTool vulnerability (USN-4987-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4987-1 advisory. It was discovered that ExifTool did not properly sanitize user data for the DjVu file format. An attacker could use this vulnerability to cause a DoS ...
Exploit for Code Injection in Exiftool_Project Exiftool
Gitlab-Exiftool-RCE RCE Exploit for Gitlab 13.10.3 - GitL...
ExifTool DjVu ANT Perl injection
This module exploits a Perl injection vulnerability in the DjVu ANT parsing code of ExifTool versions 7.44 through 12.23 inclusive. The injection is used to execute a shell command using Perl backticks. The DjVu image can be embedded in a wrapper image using the HasselbladExif EXIF field. Module...
Exploit for Code Injection in Exiftool_Project Exiftool
POC-CVE-2021-22204 https://nvd.nist.gov/vuln/detail/CVE-2021-...
Debian DLA-2663-1 : libimage-exiftool-perl security update
A vulnerability was discovered in libimage-exiftool-perl, a library and program to read and write meta information in multimedia files, which may result in execution of arbitrary code if a malformed DjVu file is processed. For Debian 9 stretch, this problem has been fixed in version 10.40-1+deb9u...
Debian: Security Advisory (DLA-2663-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2663-1] libimage-exiftool-perl security update
----------------------------------------------------------------------- Debian LTS Advisory DLA-2663-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta May 16, 2021 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...
DLA-2663-1 libimage-exiftool-perl - security update
Bulletin has no description...
Exploit for Code Injection in Exiftool_Project Exiftool
Vulnerable Version 7.44 12.23 Reproduce $...
ExifTool DjVu ANT Perl Injection Exploit
This Metasploit module exploits a Perl injection vulnerability in the DjVu ANT parsing code of ExifTool versions 7.44 through 12.23 inclusive. The injection is used to execute a shell command using Perl backticks. The DjVu image can be embedded in a wrapper image using the HasselbladExif EXIF...
ExifTool DjVu ANT Perl Injection
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ExifTool DjVu ANT Perl injection', 'Description' = %q This module exploits a Perl injection vulnerability in the DjVu ANT parsing code of ExifToo...
openSUSE: Security Advisory for perl-Image-ExifTool (openSUSE-SU-2021:0707-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...