Vulnerability
vulnerability:imagemagick_remote_code_execution_vulnerability
Also: ImageMagick RCE
Vulnerability that allowed a malicious uploaded image to produce remote code execution on a website.
Vulnerability that allowed a malicious uploaded image to produce remote code execution on a website.
“ImageMagick remote code execution vulnerability”
“you can get access to the website just by uploading a malicious image”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | AFFECTS | ImageMagick | Explicit | 60 |
| incoming | EXPLOITS | Tommy DeVoss | Explicit | 60 |
Tommy DeVoss EXPLOITS ImageMagick remote code execution vulnerability
Tommy says he used the public ImageMagick remote code execution vulnerability to obtain remote code execution on two Yahoo servers.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“I actually got remote code execution on two of Yahoo’s servers using that”
ImageMagick remote code execution vulnerability AFFECTS ImageMagick
The episode identifies the issue as an ImageMagick remote code execution vulnerability and explains that malicious image uploads could provide access to a website.
Explicit Confidence 98% · Tommy DeVoss EP 60 Details
“ImageMagick remote code execution vulnerability was public at that time”
“websites let you upload an image but you could send a malicious image to it”