Arbitrary Code Execution Vulnerability in ExifTool's DjVu Module
CVE-2021-22204

7.8HIGH

Key Information:

Vendor

Exiftool

Status
Exiftool
Vendor
CVE Published:
23 April 2021

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 92%🦅 CISA Reported

What is CVE-2021-22204?

A significant vulnerability exists in ExifTool versions 7.44 and later, where the improper handling of user data within the DjVu file format enables arbitrary code execution. This can occur when malicious images crafted to exploit this flaw are parsed, potentially allowing attackers to execute harmful code on affected systems. Users are urged to update to the latest version and review security advisories to mitigate risks associated with this vulnerability.

CISA has reported CVE-2021-22204

CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed CVE-2021-22204 as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace

The CISA's recommendation is: Apply updates per vendor instructions.

Affected Version(s)

ExifTool >=7.44, <12.24

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2021-22204
Created by Rapid7

CVE-2021-22204-exiftool
Created by convisolabs

exploit-CVE-2021-22204
Created by UNICORDev

References

https://github.com/exiftool/exiftool/commit/cf0f4e7dcd024...
x_refsource_MISC
https://hackerone.com/reports/1154542
x_refsource_MISC
https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE...
x_refsource_CONFIRM

EPSS Score

92% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • 🦅

    CISA Reported

  • Vulnerability published

  • Vulnerability Reserved

Credit

Thanks vakzz for reporting this vulnerability through the GitLab HackerOne bug bounty program who then reported it to the ExifTool maintainer
JSON
.