Beveiligingsadvies

CVE-2020-29599

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-12-07 00:00:00

Laatst bijgewerkt 2024-08-04 16:55:10

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c.

← Alle CVE's bekijken Bekijk op cve.org ↗