Security Advisories (2)
CVE-2022-23935 (2022-01-25)

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check, leading to command injection.

CVE-2021-22204 (2021-04-23)

Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image

NAME

Image::ExifTool::InDesign - Read/write meta information in Adobe InDesign files

SYNOPSIS

This module is used by Image::ExifTool

DESCRIPTION

This module contains routines required by Image::ExifTool to read XMP meta information from Adobe InDesign (.IND, .INDD and .INDT) files.

LIMITATIONS

1) Only XMP meta information is processed.

2) A new XMP stream may not be created, so XMP tags may only be written to InDesign files which previously contained XMP.

3) File sizes of greater than 2 GB are supported only if the system supports them and the LargeFileSupport option is enabled.

AUTHOR

Copyright 2003-2018, Phil Harvey (phil at owl.phy.queensu.ca)

This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself.

REFERENCES

http://www.adobe.com/devnet/xmp/pdfs/XMPSpecificationPart3.pdf

SEE ALSO

Image::ExifTool(3pm)