News for hackers. Stuff that matters.

A comment on GraphicsMagick and ImageMagick popen() shell vulnerability via filename. Parent comment

Re:GraphicsMagick and ImageMagick popen() shell vulnerabilit... by 0x0 on Sunday May 29, 2016 @08:56PM (#11799001)
PHP does not use imagick, but a (forked) libgd2 by default (some distros patch php to use the distro libgd). Imagick is only available if you install a C PHP extension providing an imagick interface.
[ Parent | on HN ]

There are no comments on this comment yet.