Vulnerability Details CVE-2016-9190
Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an "Insecure Sign Extension" issue affecting the ImagingNew in Storage.c component.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 67.5%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 6.8
Products affected by CVE-2016-9190
-
cpe:2.3:a:python:pillow:-
-
cpe:2.3:a:python:pillow:1.0
-
cpe:2.3:a:python:pillow:1.1
-
cpe:2.3:a:python:pillow:1.2
-
cpe:2.3:a:python:pillow:1.3
-
cpe:2.3:a:python:pillow:1.4
-
cpe:2.3:a:python:pillow:1.5
-
cpe:2.3:a:python:pillow:1.6
-
cpe:2.3:a:python:pillow:1.7.0
-
cpe:2.3:a:python:pillow:1.7.1
-
cpe:2.3:a:python:pillow:1.7.2
-
cpe:2.3:a:python:pillow:1.7.3
-
cpe:2.3:a:python:pillow:1.7.4
-
cpe:2.3:a:python:pillow:1.7.5
-
cpe:2.3:a:python:pillow:1.7.6
-
cpe:2.3:a:python:pillow:1.7.7
-
cpe:2.3:a:python:pillow:1.7.8
-
cpe:2.3:a:python:pillow:2.0.0
-
cpe:2.3:a:python:pillow:2.1.0
-
cpe:2.3:a:python:pillow:2.2.0
-
cpe:2.3:a:python:pillow:2.2.1
-
cpe:2.3:a:python:pillow:2.2.2
-
cpe:2.3:a:python:pillow:2.3.0
-
cpe:2.3:a:python:pillow:2.3.1
-
cpe:2.3:a:python:pillow:2.4.0
-
cpe:2.3:a:python:pillow:2.5.0
-
cpe:2.3:a:python:pillow:2.5.1
-
cpe:2.3:a:python:pillow:2.5.2
-
cpe:2.3:a:python:pillow:2.5.3
-
cpe:2.3:a:python:pillow:2.6.0
-
cpe:2.3:a:python:pillow:2.6.1
-
cpe:2.3:a:python:pillow:2.6.2
-
cpe:2.3:a:python:pillow:2.7.0
-
cpe:2.3:a:python:pillow:2.8.0
-
cpe:2.3:a:python:pillow:2.8.1
-
cpe:2.3:a:python:pillow:2.8.2
-
cpe:2.3:a:python:pillow:2.9.0
-
cpe:2.3:a:python:pillow:3.0.0
-
cpe:2.3:a:python:pillow:3.1.0
-
cpe:2.3:a:python:pillow:3.3.1
-
cpe:2.3:o:debian:debian_linux:8.0