CVE-2014-3589

State: Published
Severity: Not scored
Published: Aug 25, 2014
Updated: Aug 6, 2024
Reserved: May 14, 2014

Description

PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://pypi.python.org/pypi/Pillow/2.5.2
openSUSE-SU-2015:0798vendor-advisory
https://pypi.python.org/pypi/Pillow/2.3.2
https://github.com/python-pillow/Pillow/commit/205e056f8f9b06ed7b925cf8aa0874bc4aaf8a7d
DSA-3009vendor-advisory
59825third-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.