FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2016-0775

This CVE name corresponds to:

Entered	Topic
2016-02-09	py-imaging, py-pillow -- Buffer overflow in FLI decoding code

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2016-0775 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2016-0775
Phase	Assigned(20151216)

Description

Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file.

References

Source	Reference
CONFIRM	https://github.com/python-pillow/Pillow/blob/c3cb690fed5d4bf0c45576759de55d054916c165/CHANGES.rst
CONFIRM	https://github.com/python-pillow/Pillow/commit/893a40850c2d5da41537958e40569c029a6e127b
DEBIAN	DSA-3499