Lucene search
GoogleOSV:PYSEC-2016-7HistoryApr 13, 2016 - 4:59 p.m.
PYSEC-2016-7
2016-04-1316:59:00
Google
osv.dev
6
0.015 Low
EPSS
Percentile
86.9%
Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, which triggers a heap-based buffer overflow.
References
www.securityfocus.com/bid/86064
github.com/advisories/GHSA-hvr8-466p-75rh
github.com/python-pillow/Pillow/blob/c3cb690fed5d4bf0c45576759de55d054916c165/CHANGES.rst
github.com/python-pillow/Pillow/commit/4e0d9b0b9740d258ade40cce248c93777362ac1e
github.com/python-pillow/Pillow/pull/1714
security.gentoo.org/glsa/201612-52
Related
f5
f5
K67317871 : Python Pillow vulnerability CVE 2016-4009
2017-01-27 00:00:00
cvelist
cvelist
CVE-2016-4009
2016-04-13 16:00:00
github
github
Pillow Integer overflow in ImagingResampleHorizontal
2018-07-24 20:15:48
veracode
veracode
Integer Overflow
2017-05-16 03:23:08
prion
prion
Integer overflow
2016-04-13 16:59:00
debiancve
debiancve
CVE-2016-4009
2016-04-13 16:59:25
osv
osv
Pillow Integer overflow in ImagingResampleHorizontal
2018-07-24 20:15:48
cve
cve
CVE-2016-4009
2016-04-13 16:59:25
ubuntucve
ubuntucve
CVE-2016-4009
2016-04-13 00:00:00
nvd
nvd
CVE-2016-4009
2016-04-13 16:59:25
nessus
nessus
EulerOS 2.0 SP3 : python-pillow (EulerOS-SA-2020-2080)
2020-09-28 00:00:00
EulerOS 2.0 SP5 : python-pillow (EulerOS-SA-2019-2701)
2019-12-23 00:00:00
GLSA-201612-52 : Pillow: Multiple vulnerabilities
2017-01-03 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2020-2080)
2020-09-29 00:00:00
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2019-2701)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2020-1473)
2020-04-16 00:00:00
gentoo
gentoo
Pillow: Multiple vulnerabilities
2016-12-31 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1957
2021-07-02 18:03:40