Описание
Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, which triggers a heap-based buffer overflow.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| pillow | fixed | 3.1.1-1 | package | |
| python-imaging | removed | package |
Примечания
https://github.com/python-pillow/Pillow/commit/4e0d9b0b9740d258ade40cce248c93777362ac1e
Upstream confirmed that versions prior 2.7 are not vulnerable.
https://github.com/python-pillow/Pillow/pull/1714
https://github.com/python-pillow/Pillow/issues/1737
Связанные уязвимости
Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, which triggers a heap-based buffer overflow.
Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, which triggers a heap-based buffer overflow.
Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, which triggers a heap-based buffer overflow.
Pillow Integer overflow in ImagingResampleHorizontal
Уязвимость функции ImagingResampleHorizontal (libImaging/Resample.c) библиотеки для работы с изображениями Pillow, позволяющая нарушителю воздействовать на конфиденциальность, целостность и доступность данных