CVE-2014-3589: Input Validation
PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.
Other sources
PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3589?
CVE-2014-3589 has a severity level classified as moderate due to its potential to cause denial of service.
How do I fix CVE-2014-3589?
To fix CVE-2014-3589, upgrade to Pillow version 2.5.2 or later, or 2.3.2 for earlier versions.
Which versions are affected by CVE-2014-3589?
CVE-2014-3589 affects Pillow versions prior to 2.5.2 and 2.3.x versions below 2.3.2.
What is the nature of the vulnerability in CVE-2014-3589?
CVE-2014-3589 is a denial of service vulnerability caused by a crafted block size in the IcnsImagePlugin.py.
Is CVE-2014-3589 specific to certain operating systems?
CVE-2014-3589 can affect multiple operating systems that utilize the vulnerable versions of the Pillow library.