Vulnerability Details CVE-2014-3007
Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.018
EPSS Ranking 82.2%
CVSS Severity
CVSS v2 Score 10.0
References
Products affected by CVE-2014-3007
-
cpe:2.3:a:python:pillow:2.3.0
-
cpe:2.3:a:pythonware:python_imaging_library:1.1.5
-
cpe:2.3:a:pythonware:python_imaging_library:1.1.6
-
cpe:2.3:a:pythonware:python_imaging_library:1.1.7