PT-2018-16230

Name of the Vulnerable Software and Affected Versions Leptonica version 1.74.4 Description An exploitable command injection issue exists in the gplotMakeOutput function. A specially crafted gplot rootname argument can cause a command injection, resulting in arbitrary code execution. An attacker c...

Leptonica gplotMakeOutput Command Injection Vulnerability

Summary An exploitable command injection vulnerability exists in the gplotMakeOutput function of Leptonica 1.74.4. A specially crafted gplot rootname argument can cause a command injection resulting in arbitrary code execution. An attacker can provide a malicious path as input to an application...