CVEs-PoC/2014/CVE-2014-9601.md

CVE-2014-9601

Description

Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
• https://github.com/python-pillow/Pillow/pull/1060

Github

• https://github.com/ARPSyndicate/cvemon