Security Advisory

CVE-2019-1010174

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-07-25 13:12:03

Last updated 2024-08-05 03:07:18

Assigner dwf

CVSS score not scored

State PUBLISHED

Description

CImg The CImg Library v.2.3.3 and earlier is affected by: command injection. The impact is: RCE. The component is: load_network() function. The attack vector is: Loading an image from a user-controllable url can lead to command injection, because no string sanitization is done on the url. The fixed version is: v.2.3.4.

← Browse all CVEs View on cve.org ↗