4 ms·
ImageTragick did not affect major image formats; it was a vulnerability in the parser for ImageMagick's scripting languages [1]. The real problem was that suppo
by tetromino_ 10y ago
ImageTragick did not affect major image formats; it was a vulnerability in the parser for ImageMagick's scripting languages [1]. The real problem was that support for scripting was enabled by default, and there was no obvious big red button to disable it.
[1] Like MVG (http://www.imagemagick.org/script/magick-vector-graphics.php http://www.imagemagick.org/script/magick-vector-graphics.php) and MSL (http://www.imagemagick.org/script/conjure.php http://www.imagemagick.org/script/conjure.php)