CVE-2007-4965 Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive informatio...
MediumCVSS 5.8
EPSS 14.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| python | <= 2.5.1 | No fix listed |
References
- bugs.gentoo.org third-party-advisory
- docs.info.apple.com third-party-advisory
- APPLE-SA-2007-12-17 mailing-list vendor-advisory
- APPLE-SA-2009-02-12 mailing-list vendor-advisory
- 20070916 python <= 2.5.1 standart librairy multiples int overflow, heap overflow in imageop module exploit mailing-list
- SUSE-SR:2008:003 third-party-advisory vendor-advisory
- [Security-announce] 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates mailing-list third-party-advisory
- 26837 broken-link third-party-advisory
- 27460 broken-link third-party-advisory
- 27562 broken-link third-party-advisory
- 27872 broken-link third-party-advisory
- 28136 broken-link third-party-advisory
- 28480 broken-link third-party-advisory
- 28838 broken-link third-party-advisory
- 29032 broken-link third-party-advisory
- 29303 broken-link third-party-advisory
- 29889 broken-link third-party-advisory
- 31255 broken-link third-party-advisory
- 31492 broken-link third-party-advisory
- 33937 broken-link third-party-advisory
- 37471 broken-link third-party-advisory
- 38675 broken-link third-party-advisory
- support.apple.com third-party-advisory
- support.avaya.com third-party-advisory
- wiki.rpath.com third-party-advisory
- DSA-1551 third-party-advisory vendor-advisory
- DSA-1620 third-party-advisory vendor-advisory
- GLSA-200711-07 third-party-advisory vendor-advisory
- MDVSA-2008:012 broken-link vendor-advisory
- MDVSA-2008:013 broken-link vendor-advisory
- RHSA-2007:1076 third-party-advisory vendor-advisory
- RHSA-2008:0629 third-party-advisory vendor-advisory
- 20080212 FLEA-2008-0002-1 python mailing-list third-party-advisory vdb-entry
- 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates mailing-list third-party-advisory vdb-entry
- 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components mailing-list third-party-advisory vdb-entry
- 25696 exploit third-party-advisory vdb-entry
- USN-585-1 third-party-advisory vendor-advisory
- TA07-352A third-party-advisory us-government-resource
- www.vmware.com third-party-advisory
- ADV-2007-3201 broken-link vdb-entry
- ADV-2007-4238 broken-link vdb-entry
- ADV-2008-0637 broken-link vdb-entry
- ADV-2009-3316 broken-link vdb-entry
- python-imageop-bo(36653) vdb-entry
- issues.rpath.com third-party-advisory
- oval:org.mitre.oval:def:10804 broken-link signature vdb-entry
- oval:org.mitre.oval:def:8486 broken-link signature vdb-entry
- oval:org.mitre.oval:def:8496 broken-link signature vdb-entry
- FEDORA-2007-2663 third-party-advisory vendor-advisory