CVE-2014-3007: Command Injection

April 27, 2014 (updated April 28, 2014)

Pillow might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.

References

bugs.debian.org/cgi-bin/bugreport.cgi?bug=737059
bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3007
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3007

Detect and mitigate CVE-2014-3007 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →