GraphicsMagick and ImageMagick popen() shell vulnerability via filename

Re:GraphicsMagick and ImageMagick popen() shell vulnerabilit... by _jomo on Sunday May 29, 2016 @09:58PM (#11799152)

Thanks HN, I have now lost my Twitter profile image and can't upload a new one:

https://twitter.com/_jom0/status/737081667215601664

[ Parent | on HN ]

Re:GraphicsMagick and ImageMagick popen() shell vulnerabilit... by keyle on Sunday May 29, 2016 @10:12PM (#11799189)

I love that you did that. Never be afraid of breaking things. In this case it's amusing but imagine you would have done this in a banking application and you'd probably be arrested for hacking.

[ Parent | on HN ]

Re:GraphicsMagick and ImageMagick popen() shell vulnerabilit... by bigiain on Monday May 30, 2016 @04:37AM (#11800281)

https://twitter.com/ajlobster/status/735240869859753985

:-)

[ Parent | on HN ]

Re:GraphicsMagick and ImageMagick popen() shell vulnerabilit... by yAnonymous on Monday May 30, 2016 @09:07AM (#11801110)

Let's check how much HDD space they got?

|dd if=/dev/zero of=hello.txt bs=1M count=1000000000

[ Parent | on HN ]

Re:GraphicsMagick and ImageMagick popen() shell vulnerabilit... by Bromskloss on Monday May 30, 2016 @06:53AM (#11800677)

I always have a hard time interpreting Twitter posts. Did you link to two images in this post? Were they things you observed when trying to upload an avatar with a filename in accordance with this bug? Why does Twitter crop the images? (This it what I see: https://u.pomf.is/dmomwl.png )

[ Parent | on HN ]

Re:GraphicsMagick and ImageMagick popen() shell vulnerabilit... by _jomo on Monday May 30, 2016 @07:44AM (#11800817)

Yes, there are two images. You should be able to click on them separately to open the full images [0][1]. The first screenshot shows a preview of the file with its name which I tried to upload to Twitter, the other one shows what I observed locally through htop when running `convert` on that filename.

0: https://pbs.twimg.com/media/Cjqj3oiXIAAYJix.jpg:large

1: https://pbs.twimg.com/media/Cjqj3pFWkAEaRcD.jpg:large

[ Parent | on HN ]