PT-2014-4371

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 2.3.1 Python Image Library PIL versions 1.1.7 and earlier Description The issue concerns the improper creation of temporary files by certain functions in Python Image Library PIL and Pillow, allowing local users to...

CVE-2014-1933

The 1 JpegImagePlugin.py and 2 EpsImagePlugin.py scripts in Python Image Library PIL 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files on the command line, which makes it easier for local users to conduct symlink attacks by listing the processes...