Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft’s Servers
A crafted SVG submitted to Bing's image search ran commands as NT AUTHORITYSYSTEM on Microsoft's production image-processing workers, and as root on…
Tag: CVE-2016-3714
CVE-2016-3714: ImageMagick Delegate Command Injection (ImageTragick)
A critical command injection vulnerability in ImageMagick's delegate mechanism allows remote code execution via crafted image files. This 2016 vulnerability is the…
ImageMagick
An open-source image processing suite used by Bing's pipeline. Its delegate mechanism was exploited to achieve command injection. The article recommends disabling…