The post discusses a bug in ExifTool that allows for arbitrary code execution. The author discovered the bug while examining a bug bounty program and noticed they were using an older version of ExifTool. The bug involves the use of the 'eval' function in Perl, which can be abused to execute code. The post also mentions

16m read time From devcraft.io
Post cover image
Table of contents
BackgroundThe BugAdditional FormatsBonus FormatsReferences

Sort: