Search CVE reports
41 – 43 of 43 results
CVE-2014-3007
Medium priorityPython Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.
2 affected packages
pillow, python-imaging
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
pillow | — | — | — | — | — |
python-imaging | — | — | — | — | — |
CVE-2014-1933
Medium priorityThe (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files on the command line, which makes it easier for local users to...
2 affected packages
pillow, python-imaging
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
pillow | — | — | — | — | — |
python-imaging | — | — | — | — | — |
CVE-2014-1932
Medium priorityThe (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library (PIL) 1.1.7 and earlier and...
2 affected packages
pillow, python-imaging
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
pillow | — | — | — | — | — |
python-imaging | — | — | — | — | — |