News for hackers. Stuff that matters.
Re:Remote code execution vulnerability in ImageMagick by ashitlerferad on Tuesday May 03, 2016 @10:59PM (#11625852)
ImageMagick shouldn't have been using /bin/sh or system() in the first place. Instead it should use fork+exec or libpipeline.

http://bonedaddy.net/pabs3/log/2014/02/17/pid-preservation-s... http://libpipeline.nongnu.org/

I expect there may also be option injection vulnerabilities in the code.

http://www.defensecode.com/public/DefenseCode_Unix_WildCards...

Re:Remote code execution vulnerability in ImageMagick by ntauthority on Wednesday May 04, 2016 @04:14AM (#11626933)
Both don't exist on non-POSIX systems, like NT. ImageMagick supports those natively, however.
Re:Remote code execution vulnerability in ImageMagick by poizan42 on Wednesday May 04, 2016 @07:35AM (#11627608)
So? Use CreateProcess on NT then

Edit: Actually it already does: https://github.com/ImageMagick/ImageMagick/blob/master/Magic...

Re:Remote code execution vulnerability in ImageMagick by ashitlerferad on Thursday May 05, 2016 @12:10AM (#11633965)
It seems like CreateProcess uses the one-long-string for the command rather than the POSIX model of one string per argument. Is there any way to run a process on Windows using one string per argument?
Re:Remote code execution vulnerability in ImageMagick by JdeBP on Thursday May 05, 2016 @05:59AM (#11634884)
Actually, it's (normally) two strings, one for the program image filename and one for the command tail.

* https://msdn.microsoft.com/en-gb/library/windows/desktop/ms6...

A single command tail is the Win32 model at base, as it was the DOS API model before it. (The OS/2 model was multiple command tails, although in practice most programs read no more than just one.) exec*() implementations are layered on top of this, and the argv[] notion is a shared fiction maintained by the runtime libraries of C and C++ implementations.

Re:Remote code execution vulnerability in ImageMagick by sitkack on Wednesday May 04, 2016 @06:48AM (#11627426)
Security is a spectrum, beware of falling into a https://en.wikipedia.org/wiki/False_dilemma
Re:Remote code execution vulnerability in ImageMagick by ashitlerferad on Wednesday May 04, 2016 @04:59AM (#11627107)
ISTR NT has other mechanisms for that.