Pillow Security Vulnerabilities and Issues — Pillow CVE List

Lucene search

PythonPillow

4 matches found

CVE•added 2014/04/17 2:55 p.m.•97 views

CVE-2014-1932

The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 do not properly create temporary files, which allow l...

4.4CVSS7.1AI score0.00133EPSS

CVE•added 2014/08/25 2:55 p.m.•83 views

CVE-2014-3589

PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.

5CVSS6.4AI score0.00983EPSS

CVE•added 2014/04/17 2:55 p.m.•81 views

CVE-2014-1933

The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files on the command line, which makes it easier for local users to conduct symlink attacks by listing the processes.

2.1CVSS7.3AI score0.00111EPSS

CVE•added 2014/04/27 8:55 p.m.•64 views

CVE-2014-3007

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.

10CVSS7.8AI score0.01846EPSS