- Vendor / Project
- Perl
- Product
- Exiftool
- Date added
- Nov 17, 2021
- Due date
- Dec 1, 2021
- Known ransomware use
- Unknown
- CWEs
- CWE-95
Description
Improper neutralization of user data in the DjVu file format in Exiftool versions 7.44 and up allows arbitrary code execution when parsing the malicious image
Required action
Apply updates per vendor instructions.