CVE

Id
89352  
CVE No.
CVE-2016-2533  
Status
Candidate  
Description
Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PhotoCD file.  
Phase
Assigned (20160222)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
775202 89352 CVE-2016-2533 MLIST:[oss-security] 20160202 CVE Request -- Buffer overflow in Python-Pillow and PIL  View
775203 89352 CVE-2016-2533 URL:http://www.openwall.com/lists/oss-security/2016/02/02/5  View
775204 89352 CVE-2016-2533 MLIST:[oss-security] 20160222 Re: CVE Request -- Buffer overflow in Python-Pillow and PIL  View
775205 89352 CVE-2016-2533 URL:http://www.openwall.com/lists/oss-security/2016/02/22/2  View
775206 89352 CVE-2016-2533 CONFIRM:https://github.com/python-pillow/Pillow/blob/c3cb690fed5d4bf0c45576759de55d054916c165/CHANGES.rst  View
775207 89352 CVE-2016-2533 CONFIRM:https://github.com/python-pillow/Pillow/commit/5bdf54b5a76b54fb00bd05f2d733e0a4173eefc9#diff-8ff6909c159597e22288ad818938fd6b  View
775208 89352 CVE-2016-2533 CONFIRM:https://github.com/python-pillow/Pillow/commit/ae453aa18b66af54e7ff716f4ccb33adca60afd4#diff-8ff6909c159597e22288ad818938fd6b  View
775209 89352 CVE-2016-2533 CONFIRM:https://github.com/python-pillow/Pillow/pull/1706  View
775210 89352 CVE-2016-2533 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html  View
775211 89352 CVE-2016-2533 DEBIAN:DSA-3499  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
1058 JVNDB-2016-001831 Siemens SIMATIC S7-1200 CPU デバイスにおける "ユーザプログラムブロック" 保護メカニズムを回避される脆弱性 Siemens SIMATIC S7-1200 CPU デバイスには、"ユーザプログラムブロック" 保護メカニズムを回避される脆弱性が存在します。 CVE-2016-2846 89352 6.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001831.html  View