CVE-2007-4965
Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 14.0%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.
- CVSS 2.0
- 5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:P
- EPSS
- 13.95% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-190
- Affected
- python/python
- Source
- cve@mitre.org
References
- http://bugs.gentoo.org/show_bug.cgi?id=192876Third Party Advisory
- http://docs.info.apple.com/article.html?artnum=307179Third Party Advisory
- http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.htmlMailing List
- http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.htmlMailing List
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065826.htmlExploit
- http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.htmlThird Party Advisory
- http://lists.vmware.com/pipermail/security-announce/2008/000005.htmlThird Party Advisory
- http://secunia.com/advisories/26837Broken Link
- http://secunia.com/advisories/27460Broken Link
- http://secunia.com/advisories/27562Broken Link
- http://secunia.com/advisories/27872Broken Link
- http://secunia.com/advisories/28136Broken Link
- http://secunia.com/advisories/28480Broken Link
- http://secunia.com/advisories/28838Broken Link
- http://secunia.com/advisories/29032Broken Link
- http://secunia.com/advisories/29303Broken Link
- http://secunia.com/advisories/29889Broken Link
- http://secunia.com/advisories/31255Broken Link
- http://secunia.com/advisories/31492Broken Link
- http://secunia.com/advisories/33937Broken Link
- http://secunia.com/advisories/37471Broken Link
- http://secunia.com/advisories/38675Broken Link
- http://support.apple.com/kb/HT3438Third Party Advisory
- http://support.avaya.com/css/P8/documents/100074697Third Party Advisory
- http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0254Third Party Advisory
- http://www.debian.org/security/2008/dsa-1551Third Party Advisory
- http://www.debian.org/security/2008/dsa-1620Third Party Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200711-07.xmlThird Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:012Broken Link
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:013Broken Link
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.