Pillow command injection
Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.5.0 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2014-3007US | high10.0 | — | ||
Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CV… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-1932.htmlWEB
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737059WEB
- https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2014-87.yamlWEB
- https://github.com/python-pillow/PillowPACKAGE
- https://nvd.nist.gov/vuln/detail/CVE-2014-3007ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan