CVE

Id
70885  
CVE No.
CVE-2014-3589  
Status
Candidate  
Description
PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.  
Phase
Assigned (20140514)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
675271 70885 CVE-2014-3589 CONFIRM:https://github.com/python-pillow/Pillow/commit/205e056f8f9b06ed7b925cf8aa0874bc4aaf8a7d  View
675272 70885 CVE-2014-3589 CONFIRM:https://pypi.python.org/pypi/Pillow/2.3.2  View
675273 70885 CVE-2014-3589 CONFIRM:https://pypi.python.org/pypi/Pillow/2.5.2  View
675274 70885 CVE-2014-3589 DEBIAN:DSA-3009  View
675275 70885 CVE-2014-3589 URL:http://www.debian.org/security/2014/dsa-3009  View
675276 70885 CVE-2014-3589 SUSE:openSUSE-SU-2015:0798  View
675277 70885 CVE-2014-3589 URL:http://lists.opensuse.org/opensuse-updates/2015-04/msg00056.html  View
675278 70885 CVE-2014-3589 SECUNIA:59825  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15043 JVNDB-2014-003918 PHP の ext/standard/dns.c の php_parserr 関数におけるバッファオーバーフローの脆弱性 PHP の ext/standard/dns.c の php_parserr 関数には、dns_get_record 関数および dn_expand 関数に関する処理に不備があるため、バッファオーバーフローの脆弱性が存在します。 CVE-2014-3597 70885 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003918.html  View