Lucene search

K
cvelistMitreCVELIST:CVE-2020-29599
HistoryDec 07, 2020 - 12:00 a.m.

CVE-2020-29599

2020-12-0700:00:00
mitre
www.cve.org
8
imagemagick
mishandles
authenticate
password-protected
pdf files
shell commands
coders
pdf.

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

50.0%

ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c.