Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-3007

Опубликовано: 27 апр. 2014
Источник: nvd
CVSS2: 10
EPSS Средний

Описание

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:python:pillow:2.3.0:*:*:*:*:*:*:*
cpe:2.3:a:pythonware:python_imaging_library:*:*:*:*:*:*:*:*
Версия до 1.1.7 (включая)

EPSS

Процентиль: 96%
0.11597
Средний

10 Critical

CVSS2

Дефекты

CWE-78

Связанные уязвимости

ubuntu
больше 12 лет назад

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.

redhat
больше 12 лет назад

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.

debian
больше 12 лет назад

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allo ...

CVSS3: 9.8
github
около 4 лет назад

Pillow command injection

EPSS

Процентиль: 96%
0.11597
Средний

10 Critical

CVSS2

Дефекты

CWE-78