PT-2007-6079 · Python+1 · Python+1
Published
2007-09-18
·
Updated
2023-08-02
·
CVE-2007-4965
CVSS v2.0
5.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Python versions prior to 2.5.1
Description
The issue is related to multiple integer overflows in the imageop module, which can be exploited by context-dependent attackers to cause a denial of service, potentially leading to an application crash, and possibly obtain sensitive information, such as memory contents. This can be achieved via crafted arguments to the
tovideo method and other unspecified vectors related to imageop.c, rbgimgmodule.c, and other files, triggering heap-based buffer overflows.Recommendations
For versions prior to 2.5.1, update to a version that contains a fix for this issue to prevent potential exploitation. As a temporary workaround, consider restricting the use of the imageop module until a patch is available. Avoid using crafted arguments to the
tovideo method in the affected API endpoint until the issue is resolved.Exploit
Fix
DoS
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Python
Red Hat