地图 / Insufficient shell characters filtering leads to (potentially remote) code execution (CVE-2016-3714)

Insufficient shell characters filtering leads to (potentially remote) code execution (CVE-2016-3714)

代码执行 / Unlabeled / #143966

厂商: Internet Bug Bounty
严重程度: 未评级
赏金: —
弱点: Unlabeled
研究员: @stewie
披露日期: 2016-05-03
资产: IBB (Legacy)
CVE: CVE-2016-3714

该报告还没有中文解读。

原文摘录

摘自原文（361 字符中的一小部分）

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka "ImageTragick."

默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Internet Bug Bounty 所有。

时间线

2016-04-21报告提交
2016-05-03公开披露

阅读 HackerOne 原文 ↗作者 @stewie · 版权归作者与 Internet Bug Bounty 所有

同类报告

CVE-2020-8913 - Persistent arbitrary code execution in Android's Google Play Core Library: details, explanation and the PoCGoogle · —Remote code execution [CVE-2023-36845]MTN Group · 2024-10-09 Remote Code Execution on Proxy Service (as root)██████ · —XSS Vulnerability on Pressable/Atomic Hosting Platform via unescaped admin notices leads to code executionAutomattic · 2026-02-18 Remote Code Execution via unsafe usage of `reply.view({ raw })` in @fastify/view (EJS template engine)Fastify · 2025-05-28 Reflected XSS and Server Side Template Injection in all HubSpot CMSesHubSpot Inactive · —

Insufficient shell characters filtering leads to (potentially remote) code execution (CVE-2016-3714) · 破甲 POJIA