3 ms·
Arbitrary code execution found in ExifTool. Make sure to update to 12.24
- mistrial9 5y agorecently I spent a month looking through the Debian EXIF tool source code along with a substantial set of pics from several real people who travel .. after a "gasp" (or three), I realized that "photographic evidence with time stamp, GPS and hardware ID is a spies' playground" .. it actually is.. ps- keep up with your patches
- mdaniel 5y agoFun fact, that was the source of a recent GitLab hotfix: https://gitlab.com/gitlab-org/gitlab/-/compare/v13.10.2-ee...v13.10.3-ee https://gitlab.com/gitlab-org/gitlab/-/compare/v13.10.2-ee..... I was joking with my colleague that "I wonder if they had `system "exiftool #{input_image_fn}"`" but it turned out I wasn't terribly far off