Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-3007

Опубликовано: 27 апр. 2014
Источник: nvd
CVSS2: 10
EPSS Низкий

Описание

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:python:pillow:2.3.0:*:*:*:*:*:*:*
cpe:2.3:a:pythonware:python_imaging_library:*:*:*:*:*:*:*:*
Версия до 1.1.7 (включая)

EPSS

Процентиль: 86%
0.03008
Низкий

10 Critical

CVSS2

Дефекты

CWE-78

Связанные уязвимости

ubuntu
почти 12 лет назад

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.

redhat
около 12 лет назад

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.

debian
почти 12 лет назад

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allo ...

CVSS3: 9.8
github
больше 3 лет назад

Pillow command injection

EPSS

Процентиль: 86%
0.03008
Низкий

10 Critical

CVSS2

Дефекты

CWE-78