Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers
XBOW found that a crafted SVG submitted to Bing's image search executed commands as NT AUTHORITY\SYSTEM on Microsoft's production image-processing workers and as root on Linux machines in the same fleet, with the same result across different hosts and...