PSF-2010-2

vendorUSosv

rgbimg and imageop overflows

view advisory published 2010-05-27Licence: per source

Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2010-1449US	high7.5	4.88% (92nd)	—	2010-05-27
Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE…

references

External citations — patches, advisories, analysis.

http://bugs.python.org/issue8678WEB
http://seclists.org/fulldisclosure/2007/Sep/279WEB
https://bugs.python.org/issue1179REPORT
https://bugzilla.redhat.com/show_bug.cgi?id=541698WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan