CVE-2014-3589

Risk Scores

Affected Products

Exploit Intelligence

• https://pypi.python.org/pypi/Pillow/2.5.2 (circl)
• openSUSE-SU-2015:0798 (circl)
• https://pypi.python.org/pypi/Pillow/2.3.2 (circl)
• https://github.com/python-pillow/Pillow/commit/205e056f8f9b06ed7b925cf8aa0874bc4aaf8a7d (circl)
• DSA-3009 (circl)
• 59825 (circl)

Timeline

• Aug 25, 2014 CVE Published
• Feb 4, 2022 EPSS Score
• Mar 29, 2022 EPSS Score
• May 20, 2022 EPSS Score
• Sep 3, 2022 EPSS Score
• Oct 26, 2022 EPSS Score
• Dec 18, 2022 EPSS Score
• Feb 8, 2023 EPSS Score
• Mar 7, 2023 EPSS Score
• May 25, 2023 EPSS Score
• Jul 16, 2023 EPSS Score
• Sep 7, 2023 EPSS Score

References

• ALAS2-2025-2768: python-pillow (medium) advisory