Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2014-3007

Опубликовано: 27 апр. 2014
Источник: ubuntu
Приоритет: medium
EPSS Средний
CVSS2: 10

Описание

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.

РелизСтатусПримечание
devel

released

2.3.0-1ubuntu3
esm-infra-legacy/trusty

released

2.3.0-1ubuntu3
lucid

DNE

precise

DNE

quantal

DNE

saucy

DNE

trusty

released

2.3.0-1ubuntu3
trusty/esm

released

2.3.0-1ubuntu3
upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

released

1.1.7-1ubuntu0.2
precise

released

1.1.7-4ubuntu0.12.04.1
quantal

released

1.1.7-4ubuntu0.12.10.1
saucy

released

1.1.7+2.0.0-1ubuntu1.1
trusty

DNE

trusty/esm

DNE

upstream

needs-triage

Показывать по

EPSS

Процентиль: 96%
0.12055
Средний

10 Critical

CVSS2

Связанные уязвимости

redhat
больше 12 лет назад

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.

nvd
больше 12 лет назад

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.

debian
больше 12 лет назад

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allo ...

CVSS3: 9.8
github
около 4 лет назад

Pillow command injection

EPSS

Процентиль: 96%
0.12055
Средний

10 Critical

CVSS2