⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2014-9601

MEDIUM · 5.0 CVSS Gepubliceerd: 16-01-2015 CWE-20

Beschrijving

Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed.

Vendors

Python Oracle Fedoraproject Opensuse

Affected products

Pillow Solaris Fedora Opensuse

References

lists.fedoraproject.org
lists.opensuse.org
pillow.readthedocs.org
www.oracle.com
www.securityfocus.com
github.com
www.djangoproject.com