PT-2014-4371 · Python+1 · Pillow+2
Wiredfool
·
Publicado
2014-04-03
·
Atualizado
2022-05-17
·
CVE-2014-1932
CVSS v4.0
8.5
Alta
| Vetor | AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Pillow versions prior to 2.3.1
Python Image Library (PIL) versions 1.1.7 and earlier
Description
The issue concerns the improper creation of temporary files by certain functions in Python Image Library (PIL) and Pillow, allowing local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on the temporary file. The affected functions include
load djpeg in JpegImagePlugin.py, Ghostscript in EpsImagePlugin.py, load in IptcImagePlugin.py, and copy in Image.py. There is also a potential for remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.Recommendations
For Pillow versions prior to 2.3.1, update to version 2.3.1 or later to resolve the issue.
For Python Image Library (PIL) versions 1.1.7 and earlier, consider migrating to Pillow version 2.3.1 or later, as PIL is no longer maintained.
As a temporary workaround, consider restricting access to the affected functions, such as
load djpeg, Ghostscript, load, and copy, until a patch is available.Exploit
Correção
Link Following
OS Command Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Pillow
Python Image Library
Suse