01 Record

CVE-2014-1932

The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.50% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 40.2% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2014-04-17 14:00Z12 YR AGO

Last updated

2024-08-06 09:58Z2 YR AGO

Reserved

2014-02-10

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-59Improper Link Resolution Before File Access ('Link Following')Base
CWE-377Insecure Temporary FileClass

Data version

5.1

Document digest

d040ea55b74c16cfb1018a9eac7e6c7b518b584faed09b9c5929fc3ab5ca68b4

05 Affected products

VendorProductVersionsPlatforms

pythonpillowNot specified—

pythonwarepython_imaging_libraryNot specified—

redhatenterprise_linuxNot specified—

06 References

bugs.debian.orghttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737059x_refsource_CONFIRM
security.gentoo.orgGLSA-201612-52https://security.gentoo.org/glsa/201612-52vendor-advisoryx_refsource_GENTOO
github.comhttps://github.com/python-imaging/Pillow/commit/4e9f367dfd3f04c8f5d23f7f759ec12782e10ee7x_refsource_CONFIRM
www.openwall.com[oss-security] 20140210 Re: CVE requests: Pacemaker, Python Imaging Library, eyeD3, 9base, rc, Gamera, RPLY - insecure use of /tmphttp://www.openwall.com/lists/oss-security/2014/02/11/1mailing-listx_refsource_MLIST
www.ubuntu.comUSN-2168-1http://www.ubuntu.com/usn/USN-2168-1vendor-advisoryx_refsource_UBUNTU
www.securityfocus.com65511http://www.securityfocus.com/bid/65511vdb-entryx_refsource_BID
lists.opensuse.orgopenSUSE-SU-2014:0591http://lists.opensuse.org/opensuse-updates/2014-05/msg00002.htmlvendor-advisoryx_refsource_SUSE

01 Record index

CVE-2014-1932

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2014-1932

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References