PSF-2010-1

vendorUSosv

rgbimg and imageop overflows

view advisory published 2010-05-27Licence: per source

Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service (application crash) via a large ZSIZE value in a black-and-white (aka B/W) RGB image that triggers an invalid pointer dereference.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2009-4134US	medium5.0	4.42% (91st)	—	2010-05-27
Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service (application crash) via a large ZSIZE value in a black-and-white (aka B/W)…

references

External citations — patches, advisories, analysis.

http://bugs.python.org/issue8678WEB
http://seclists.org/fulldisclosure/2007/Sep/279WEB
https://bugs.python.org/issue1179REPORT
https://bugzilla.redhat.com/show_bug.cgi?id=541698WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan