Pillow command injection
Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.5.0 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-3007US | high10.0 | — | ||
Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CV… | ||||
02
references
External citations — patches, advisories, analysis.
- http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-1932.htmlWEB
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737059WEB
- https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2014-87.yamlWEB
- https://github.com/python-pillow/PillowPACKAGE
- https://nvd.nist.gov/vuln/detail/CVE-2014-3007ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan