Description
PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.
References (6)
Core 6
Core References
Patch x_refsource_confirm
https://pypi.python.org/pypi/Pillow/2.5.2
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2015-04/msg00056.html
Patch x_refsource_confirm
https://pypi.python.org/pypi/Pillow/2.3.2
Patch x_refsource_confirm
https://github.com/python-pillow/Pillow/commit/205e056f8f9b06ed7b925cf8aa0874bc4aaf8a7d
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2014/dsa-3009
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/59825
Scores
EPSS
0.0139
EPSS Percentile
80.6%
Details
CWE
CWE-20
Status
published
Products (8)
debian/python-imaging
opensuse/opensuse
13.2
pypi/pillow
0 - 2.3.2PyPI
python/pillow
2.3.0
python/pillow
2.5.0
python/pillow
2.5.1
python/pillow
2.5.2
python/pillow
< 2.3.1
Published
Aug 25, 2014
Tracked Since
Feb 18, 2026