Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2014-9601

Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed.

Related bugs and status

CVE-2014-9601 (Candidate) is related to these bugs:

Bug #1628351: PNG loading degraded

Summary				In	Importance	Status
	1628351	PNG loading degraded		pillow (Ubuntu)	Critical	Fix Released

See the

CVE page on Mitre.org for more details.

References

CONFIRM: http://pillow.readthed...
CONFIRM: https://github.com/pyt...
CONFIRM: https://www.djangoproj...
FEDORA: FEDORA-2015-0667
SUSE: openSUSE-SU-2015:0798
CONFIRM: http://www.oracle.com/...
BID: 77758