CVE-2024-41817
HIGHImageMagick 7.0.11-13-7.1.1-36 - Uncontrolled Search Path Element via MAGICK_CONFIGURE_PATH and LD_LIBRARY_PATH
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2024-41817. PoCs published by adminlove520, Dxsk, maikneysm.
AI-analyzed exploit summary The repository contains functional exploit code for CVE-2024-41817, including an autopwn script and a detailed writeup. The PoC demonstrates an authentication bypass vulnerability in TOTOLINK devices by manipulating the authCode parameter.
Description
ImageMagick is a free and open-source software suite, used for editing and manipulating digital images. The `AppImage` version `ImageMagick` might use an empty path when setting `MAGICK_CONFIGURE_PATH` and `LD_LIBRARY_PATH` environment variables while executing, which might lead to arbitrary code execution by loading malicious configuration files or shared libraries in the current working directory while executing `ImageMagick`. The vulnerability is fixed in 7.11-36.
Exploits (3)
The repository contains functional exploit code for CVE-2024-41817, including an autopwn script and a detailed writeup. The PoC demonstrates an authentication bypass vulnerability in TOTOLINK devices by manipulating the authCode parameter.
This repository contains a functional exploit for CVE-2024-41817, targeting ImageMagick versions <= 7.1.1-35. The exploit leverages malicious XML delegation or crafted library files to achieve arbitrary code execution, with support for detection, payload generation, and automated deployment via SSH.
This repository contains a functional exploit PoC for CVE-2024-41817, targeting ImageMagick via a malicious shared library. It includes a detailed writeup and an automation script that demonstrates LFI, credential extraction, SSH access, and privilege escalation.
References (3)
Scores
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H