NuytsTech Security

CVE-2016-2533

by ·

Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PhotoCD file.

Date published : 2016-04-13

http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html

https://github.com/python-pillow/Pillow/blob/c3cb690fed5d4bf0c45576759de55d054916c165/CHANGES.rst

Tags: