Python

Pillow

53 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2014-3007

  • EPSS 1.85%
  • Published 27.04.2014 20:55:23
  • Last modified 12.04.2025 10:46:40

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.

4.4

CVE-2014-1932

Exploit
  • EPSS 0.13%
  • Published 17.04.2014 14:55:11
  • Last modified 12.04.2025 10:46:40

The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 do n...

2.1

CVE-2014-1933

Exploit
  • EPSS 0.11%
  • Published 17.04.2014 14:55:11
  • Last modified 12.04.2025 10:46:40

The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files on the command line, which makes it easier for local users to conduct symlink attac...