CVE-2023-34152
CRITICALImageMagick - Remote Code Execution via OpenBlob Pipe Handling
Title source: manualExploitation Summary
EIP tracks 2 public exploits for CVE-2023-34152. PoCs published by overgrowncarrot1, SudoIndividual.
AI-analyzed exploit summary This PoC exploits CVE-2023-34152 in ImageMagick by crafting a malicious PNG filename that executes a reverse shell when processed. It uses command injection via shell metacharacters in the filename to decode and execute a base64-encoded payload.
Description
A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured.
Exploits (2)
This PoC exploits CVE-2023-34152 in ImageMagick by crafting a malicious PNG filename that executes a reverse shell when processed. It uses command injection via shell metacharacters in the filename to decode and execute a base64-encoded payload.
This PoC exploits CVE-2023-34152, an arbitrary command execution vulnerability in ImageMagick 6.9.6-4, by crafting a malicious PNG filename that triggers shell command injection when processed. The exploit generates a reverse shell payload embedded in the filename, leveraging incomplete sanitization of special characters like backticks and quotes.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H