CVE-2016-4009: Buffer Overflow
Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, which triggers a heap-based buffer overflow.
Other sources
Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, which triggers a heap-based buffer overflow.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4009?
CVE-2016-4009 is considered a critical vulnerability due to the potential for remote attackers to execute arbitrary code via a heap-based buffer overflow.
How do I fix CVE-2016-4009?
To fix CVE-2016-4009, upgrade the Pillow library to version 3.1.1 or later.
Which versions of Pillow are affected by CVE-2016-4009?
Pillow versions prior to 3.1.1, specifically up to and including 3.1.0, are affected by CVE-2016-4009.
Can CVE-2016-4009 be exploited remotely?
Yes, CVE-2016-4009 can be exploited remotely through the use of negative values for new sizes in image processing.
What component of Pillow is affected by CVE-2016-4009?
CVE-2016-4009 specifically affects the ImagingResampleHorizontal function in the libImaging/Resample.c file.