Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2014-3007

Опубликовано: 27 апр. 2014
Источник: ubuntu
Приоритет: medium
CVSS2: 10

Описание

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.

РелизСтатусПримечание
devel

released

2.3.0-1ubuntu3
esm-infra-legacy/trusty

released

2.3.0-1ubuntu3
lucid

DNE

precise

DNE

quantal

DNE

saucy

DNE

trusty

released

2.3.0-1ubuntu3
trusty/esm

released

2.3.0-1ubuntu3
upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

released

1.1.7-1ubuntu0.2
precise

released

1.1.7-4ubuntu0.12.04.1
quantal

released

1.1.7-4ubuntu0.12.10.1
saucy

released

1.1.7+2.0.0-1ubuntu1.1
trusty

DNE

trusty/esm

DNE

upstream

needs-triage

Показывать по

10 Critical

CVSS2

Связанные уязвимости

redhat
около 12 лет назад

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.

nvd
почти 12 лет назад

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.

debian
почти 12 лет назад

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allo ...

CVSS3: 9.8
github
больше 3 лет назад

Pillow command injection

10 Critical

CVSS2

Уязвимость CVE-2014-3007