Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2014-3007

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.

  • Published: Apr 27, 2014
  • Updated: Apr 13, 2023
  • CVE: CVE-2014-3007
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs:

OWASP TOP 10:

Software From Fixed in
pythonware / python_imaging_library - 1.1.7.x
python / pillow 2.3.0 2.3.0.x