CVE-2014-1933 Pillow Temporary file name leakage
LowCVSS 2.1
EPSS 0.45%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files on the command line, which makes it easier for local users to conduct symlink attacks by listing the processes.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi pillow(PyPI) | < 2.3.1 | 2.3.1 |
| pypi pillow(PyPI) | = 1.0 | No fix listed |
| pypi pillow(PyPI) | = 1.1 | No fix listed |
| pypi pillow(PyPI) | = 1.2 | No fix listed |
| pypi pillow(PyPI) | = 1.3 | No fix listed |
| pypi pillow(PyPI) | = 1.4 | No fix listed |
| pypi pillow(PyPI) | = 1.5 | No fix listed |
| pypi pillow(PyPI) | = 1.6 | No fix listed |
| pypi pillow(PyPI) | = 1.7.0 | No fix listed |
| pypi pillow(PyPI) | = 1.7.1 | No fix listed |
| pypi pillow(PyPI) | = 1.7.2 | No fix listed |
| pypi pillow(PyPI) | = 1.7.3 | No fix listed |
| pypi pillow(PyPI) | = 1.7.4 | No fix listed |
| pypi pillow(PyPI) | = 1.7.5 | No fix listed |
| pypi pillow(PyPI) | = 1.7.6 | No fix listed |
| pypi pillow(PyPI) | = 1.7.7 | No fix listed |
| pypi pillow(PyPI) | = 1.7.8 | No fix listed |
| pypi pillow(PyPI) | = 2.0.0 | No fix listed |
| pypi pillow(PyPI) | = 2.1.0 | No fix listed |
| pypi pillow(PyPI) | = 2.2.0 | No fix listed |
| pypi pillow(PyPI) | = 2.2.1 | No fix listed |
| pypi pillow(PyPI) | = 2.2.2 | No fix listed |
| pypi pillow(PyPI) | = 2.3.0 | No fix listed |
| debian/pillow(Debian:12) | < 2.4.0-1 | 2.4.0-1 |
| debian/pillow(Debian:13) | < 2.4.0-1 | 2.4.0-1 |
Show 3 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/pillow(Debian:14) | < 2.4.0-1 | 2.4.0-1 |
| python pillow | <= 2.3.0 | No fix listed |
| pythonware python imaging library | <= 1.1.7 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com exploit patch
- github.com
- github.com product
- GLSA-201612-52 vendor-advisory
- openSUSE-SU-2014:0591 vendor-advisory
- [oss-security] 20140210 CVE requests: Pacemaker, Python Imaging Library, eyeD3, 9base, rc, Gamera, RPLY - insecure use of /tmp mailing-list
- [oss-security] 20140210 Re: CVE requests: Pacemaker, Python Imaging Library, eyeD3, 9base, rc, Gamera, RPLY - insecure use of /tmp mailing-list
- USN-2168-1 vendor-advisory
- 65513 vdb-entry
- github.com vendor-advisory
- Debian Security Tracker CVE-2014-1933 vendor-advisory
- bugs.debian.org issue-tracking