PIL and Pillow Vulnerable to Symlink Attack on Tmpfiles

中 4.4CVE-2014-1932 · GHSA-x895-2wrm-hvp7 · PYSEC-2014-22 · 17/04/2014 公開 · 17/06/2026 更新

パッケージ	影響を受けるバージョン	修正済みバージョン
pillow PyPI	`< 2.3.1`	`2.3.1`
pillow python	`≤ 2.3.0`	修正版なし
python imaging library pythonware	`≤ 1.1.7`	修正版なし

概要

The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 do not properly create temporary files, which allow local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on the temporary file.

NVD の説明

The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 do not properly create temporary files, which allow local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on the temporary file.

参考情報

nvd.nist.gov/vuln/detail/CVE-2014-1932 · ADVISORY
python-imaging/Pillow commit 4e9f367 · WEB
bugs.debian.org/cgi-bin/bugreport.cgi · WEB
pypa/advisory-database · WEB
python-pillow/Pillow · PACKAGE
security.gentoo.org/glsa/201612-52 · WEB
web.archive.org/web/20170103151725/http://www.securityfocus.com/bid/65511 · WEB
lists.opensuse.org/opensuse-updates/2014-05/msg00002.html · WEB
openwall.com/lists/oss-security/2014/02/11/1 · WEB
ubuntu.com/usn/USN-2168-1 · WEB
securityfocus.com/bid/65511
GitHub Advisory GHSA-x895-2wrm-hvp7 · ADVISORY

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン