CVE:CVE-2018-3836
CNNVD:CNNVD-201804-1357
Leptonica是一套用于图像处理和图像分析应用的开源系统。
Leptonica 1.74.4版本中的‘gplotMakeOutput’函数存在命令注入漏洞。攻击者可通过输入恶意的路径利用该漏洞执行任意代码。
solution:Upgrade leptonica leptonica to a higher version than 1.74.4,and avoid the version 1.74.4; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0