CVE-2007-4965
NoneCVSS
—
EPSS
14.0%
Published
Sep 18, 2007
CISA due date
—
The record
Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:4.0 | python2.4 | 0 | 2.4.4-3+etch1 |
| Debian:4.0 | python2.5 | 0 | 2.5-5+etch1 |
| Red Hat:enterprise_linux:3::as | python | 0 | 0:2.2.3-6.8 |
| Red Hat:enterprise_linux:3::as | python-debuginfo | 0 | 0:2.2.3-6.8 |
| Red Hat:enterprise_linux:3::as | python-devel | 0 | 0:2.2.3-6.8 |
| Red Hat:enterprise_linux:3::as | python-tools | 0 | 0:2.2.3-6.8 |
| Red Hat:enterprise_linux:3::as | tkinter | 0 | 0:2.2.3-6.8 |
| Red Hat:enterprise_linux:3::desktop | python | 0 | 0:2.2.3-6.8 |
| Red Hat:enterprise_linux:3::desktop | python-debuginfo | 0 | 0:2.2.3-6.8 |
| Red Hat:enterprise_linux:3::desktop | python-devel | 0 | 0:2.2.3-6.8 |
| Red Hat:enterprise_linux:3::desktop | python-tools | 0 | 0:2.2.3-6.8 |
| Red Hat:enterprise_linux:3::desktop | tkinter | 0 | 0:2.2.3-6.8 |
| Red Hat:enterprise_linux:3::es | python | 0 | 0:2.2.3-6.8 |
| Red Hat:enterprise_linux:3::es | python-debuginfo | 0 | 0:2.2.3-6.8 |
| Red Hat:enterprise_linux:3::es | python-devel | 0 | 0:2.2.3-6.8 |
| Red Hat:enterprise_linux:3::es | python-tools | 0 | 0:2.2.3-6.8 |
| Red Hat:enterprise_linux:3::es | tkinter | 0 | 0:2.2.3-6.8 |
| Red Hat:enterprise_linux:3::ws | python | 0 | 0:2.2.3-6.8 |
| Red Hat:enterprise_linux:3::ws | python-debuginfo | 0 | 0:2.2.3-6.8 |
| Red Hat:enterprise_linux:3::ws | python-devel | 0 | 0:2.2.3-6.8 |
| Red Hat:enterprise_linux:3::ws | python-tools | 0 | 0:2.2.3-6.8 |
| Red Hat:enterprise_linux:3::ws | tkinter | 0 | 0:2.2.3-6.8 |
| Red Hat:enterprise_linux:4::as | python | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:4::as | python-debuginfo | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:4::as | python-devel | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:4::as | python-docs | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:4::as | python-tools | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:4::as | tkinter | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | python | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | python-debuginfo | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | python-devel | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | python-docs | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | python-tools | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | tkinter | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:4::es | python | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:4::es | python-debuginfo | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:4::es | python-devel | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:4::es | python-docs | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:4::es | python-tools | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:4::es | tkinter | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | python | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | python-debuginfo | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | python-devel | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | python-docs | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | python-tools | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | tkinter | 0 | 0:2.3.4-14.4.el4_6.1 |
| Red Hat:enterprise_linux:5::client | python | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::client | python-debuginfo | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::client | python-devel | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::client | python-tools | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::client | tkinter | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::client_workstation | python | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::client_workstation | python-debuginfo | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::client_workstation | python-devel | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::client_workstation | python-tools | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::client_workstation | tkinter | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::server | python | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::server | python-debuginfo | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::server | python-devel | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::server | python-tools | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::server | tkinter | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:network_satellite:4.2::el3 | rhn-solaris-bootstrap | 0 | 0:5.0.2-3 |
| Red Hat:network_satellite:4.2::el3 | rhn_solaris_bootstrap_5_0_2_3 | 0 | 0:1-0 |
| Red Hat:network_satellite:4.2::el4 | rhn-solaris-bootstrap | 0 | 0:5.0.2-3 |
| Red Hat:network_satellite:4.2::el4 | rhn_solaris_bootstrap_5_0_2_3 | 0 | 0:1-0 |
| Red Hat:network_satellite:5.0:el4 | rhn-solaris-bootstrap | 0 | 0:5.0.2-3 |
| Red Hat:network_satellite:5.0:el4 | rhn_solaris_bootstrap_5_0_2_3 | 0 | 0:1-0 |
| Red Hat:network_satellite:5.1::el4 | rhn-solaris-bootstrap | 0 | 0:5.1.1-3 |
| Red Hat:network_satellite:5.1::el4 | rhn_solaris_bootstrap_5_1_1_3 | 0 | 0:1-0 |
Related vulnerabilities
- CVE-2009-3560 The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the… Also affects python2.4
- CVE-2009-3720 The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in… Also affects python2.4
- CVE-2008-1721 Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows… Also affects python2.4
- CVE-2007-2052 Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python… Also affects python2.4
- CVE-2008-4864 Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through… Also affects python
- CVE-2010-2089 The audioop module in Python 2.7 and 3.2 does not verify the relationships between size… Also affects python
- CVE-2006-3738 Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l… Also affects rhn-solaris-bootstrap
- CVE-2006-2937 OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a… Also affects rhn-solaris-bootstrap