7 ms·
There was an RCE vulnerability this year: https://imagetragick.com/ https://imagetragick.com/
by nitrogen 10y ago
There was an RCE vulnerability this year: https://imagetragick.com/ https://imagetragick.com/
- tetromino_ 10y agoImageTragick did not affect major image formats; it was a vulnerability in the parser for ImageMagick's scripting languages [1]. The real problem was that support for scripting was enabled by default, and there was no obvious big red button to disable it. [1] Like MVG (http://www.imagemagick.org/script/magick-vector-graphics.php http://www.imagemagick.org/script/magick-vector-graphics.php) and MSL (http://www.imagemagick.org/script/conjure.php http://www.imagemagick.org/script/conjure.php)