Umbra Wiki cve cve/CVE-2021-22204
Back to wiki

CVE-2021-22204 — ExifTool Remote Code Execution Vulnerability

provenance: imported · CVE: CVE-2021-22204 · CWE: CWE-95

CVE-2021-22204: ExifTool Remote Code Execution Vulnerability

CISA Known Exploited Vulnerability (KEV)

Vendor / project Perl
Product Exiftool
Date added 2021-11-17
Due date 2021-12-01
Ransomware campaign use Unknown

Description

Improper neutralization of user data in the DjVu file format in Exiftool versions 7.44 and up allows arbitrary code execution when parsing the malicious image

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-22204

Weakness behind it

CISA records this vulnerability as an instance of CWE-95. From there the chain continues into CAPEC attack patterns and ATT&CK techniques, all inside this corpus.

References

  • NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-22204
  • KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

See all 1,745 pages under Vulnerabilities (CVE) →