SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2014-9601

Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: NONE
Integrity: NONE
Availability: PARTIAL

Reference:

BID-77758

FEDORA-2015-0667

http://pillow.readthedocs.org/releasenotes/2.7.0.html

http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html

https://github.com/python-pillow/Pillow/pull/1060

https://www.djangoproject.com/weblog/2015/jan/02/pillow-security-release/

openSUSE-SU-2015:0798


30479



423868



248392



909



195452



282