PT-2007-6079 · Python+1 · Python+1
Publicado
2007-09-18
·
Atualizado
2023-08-02
·
CVE-2007-4965
CVSS v2.0
5.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Python versions prior to 2.5.1
Description
The issue is related to multiple integer overflows in the imageop module, which can be exploited by context-dependent attackers to cause a denial of service, potentially leading to an application crash, and possibly obtain sensitive information, such as memory contents. This can be achieved via crafted arguments to the
tovideo method and other unspecified vectors related to imageop.c, rbgimgmodule.c, and other files, triggering heap-based buffer overflows.Recommendations
For versions prior to 2.5.1, update to a version that contains a fix for this issue to prevent potential exploitation. As a temporary workaround, consider restricting the use of the imageop module until a patch is available. Avoid using crafted arguments to the
tovideo method in the affected API endpoint until the issue is resolved.Exploit
Correção
DoS
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Python
Red Hat