Lucene search
+L

2 matches found

CNVD
CNVD
•added 2017/07/04 12:00 a.m.•16 views

Pillow 'j2k_encode_entry' function heap buffer overflow vulnerability

Pillow is a compiled version of PIL Python Image Processing Library with some bug fixes developed by American software developer Alex Clark. A heap buffer overflow vulnerability exists in the 'j2kencodeentry' function in Pillow versions 2.5.0 through 3.1.1. A remote attacker can exploit this...

5.5CVSS7.2AI score0.02583EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/24 12:00 a.m.•4 views

CVE-2016-3076: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the j2kencodeentry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service memory corruption via a crafted Jpeg2000 file...

5.5CVSS6.1AI score0.02583EPSS
SaveExploits0References2
Rows per page
Query Builder