PT-2019-10016 · Exiftool · Exiftool

Rafael Pedrero · Published 2019-01-02 · Updated 2019-01-11 · CVE-2018-20211

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: ExifTool version 8.32

Description: The issue allows local users to gain privileges through a DLL hijacking attack. This can be achieved by creating a specific folder in the %TEMP% directory with a victim's username and then copying a malicious ws32 32.dll file into this new folder.

Recommendations: For ExifTool version 8.32, consider updating to a newer version to mitigate the risk, as version 8.32 is obsolete.

Exploit

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2018-20211

Affected Products

Exiftool

References · 4

• 🔥 http://packetstormsecurity.com/files/150892/Exiftool-8.3.2.0-DLL-Hijacking.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2018/Dec/44 · Exploit
• https://osv.dev/vulnerability/CVE-2018-20211 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-20211 · Security Note