ImageMagick Shell Command Injection Vulnerability Affecting PDF Authentication
CVE-2020-29599

7.8HIGH

Key Information:

Vendor
Imagemagick
Status
Imagemagick
Vendor
CVE Published:
7 December 2020

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 66%

Summary

A vulnerability exists in ImageMagick that allows attackers to exploit the mishandling of the -authenticate option for password-protected PDF files. When a user-controlled password is not properly escaped or sanitized, it can enable the injection of additional shell commands through specific code paths in coders/pdf.c. This may lead to unauthorized command execution on the server, potentially compromising the integrity and security of the system.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2020-29599
Created by coco0x0a

References

https://insert-script.blogspot.com/2020/11/imagemagick-sh...
https://github.com/ImageMagick/ImageMagick/discussions/2851
https://lists.debian.org/debian-lts-announce/2021/01/msg0...
mailing-list

EPSS Score

66% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.