CVE-2008-4864
NoneCVSS
—
EPSS
21.0%
Published
Nov 1, 2008
CISA due date
—
The record
Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:3::as | python | 0 | 0:2.2.3-6.11 |
| Red Hat:enterprise_linux:3::as | python-debuginfo | 0 | 0:2.2.3-6.11 |
| Red Hat:enterprise_linux:3::as | python-devel | 0 | 0:2.2.3-6.11 |
| Red Hat:enterprise_linux:3::as | python-tools | 0 | 0:2.2.3-6.11 |
| Red Hat:enterprise_linux:3::as | tkinter | 0 | 0:2.2.3-6.11 |
| Red Hat:enterprise_linux:3::desktop | python | 0 | 0:2.2.3-6.11 |
| Red Hat:enterprise_linux:3::desktop | python-debuginfo | 0 | 0:2.2.3-6.11 |
| Red Hat:enterprise_linux:3::desktop | python-devel | 0 | 0:2.2.3-6.11 |
| Red Hat:enterprise_linux:3::desktop | python-tools | 0 | 0:2.2.3-6.11 |
| Red Hat:enterprise_linux:3::desktop | tkinter | 0 | 0:2.2.3-6.11 |
| Red Hat:enterprise_linux:3::es | python | 0 | 0:2.2.3-6.11 |
| Red Hat:enterprise_linux:3::es | python-debuginfo | 0 | 0:2.2.3-6.11 |
| Red Hat:enterprise_linux:3::es | python-devel | 0 | 0:2.2.3-6.11 |
| Red Hat:enterprise_linux:3::es | python-tools | 0 | 0:2.2.3-6.11 |
| Red Hat:enterprise_linux:3::es | tkinter | 0 | 0:2.2.3-6.11 |
| Red Hat:enterprise_linux:3::ws | python | 0 | 0:2.2.3-6.11 |
| Red Hat:enterprise_linux:3::ws | python-debuginfo | 0 | 0:2.2.3-6.11 |
| Red Hat:enterprise_linux:3::ws | python-devel | 0 | 0:2.2.3-6.11 |
| Red Hat:enterprise_linux:3::ws | python-tools | 0 | 0:2.2.3-6.11 |
| Red Hat:enterprise_linux:3::ws | tkinter | 0 | 0:2.2.3-6.11 |
| Red Hat:enterprise_linux:4::as | python | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:4::as | python-debuginfo | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:4::as | python-devel | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:4::as | python-docs | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:4::as | python-tools | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:4::as | tkinter | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:4::desktop | python | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:4::desktop | python-debuginfo | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:4::desktop | python-devel | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:4::desktop | python-docs | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:4::desktop | python-tools | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:4::desktop | tkinter | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:4::es | python | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:4::es | python-debuginfo | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:4::es | python-devel | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:4::es | python-docs | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:4::es | python-tools | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:4::es | tkinter | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:4::ws | python | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:4::ws | python-debuginfo | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:4::ws | python-devel | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:4::ws | python-docs | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:4::ws | python-tools | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:4::ws | tkinter | 0 | 0:2.3.4-14.7.el4_8.2 |
| Red Hat:enterprise_linux:5::client | python | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::client | python-debuginfo | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::client | python-devel | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::client | python-tools | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::client | tkinter | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::client_workstation | python | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::client_workstation | python-debuginfo | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::client_workstation | python-devel | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::client_workstation | python-tools | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::client_workstation | tkinter | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::server | python | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::server | python-debuginfo | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::server | python-devel | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::server | python-tools | 0 | 0:2.4.3-24.el5_3.6 |
| Red Hat:enterprise_linux:5::server | tkinter | 0 | 0:2.4.3-24.el5_3.6 |
Related vulnerabilities
- CVE-2007-4965 Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow… Also affects python
- CVE-2007-2052 Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python… Also affects python
- CVE-2010-2089 The audioop module in Python 2.7 and 3.2 does not verify the relationships between size… Also affects python
- CVE-2009-3720 The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in… Also affects python
- CVE-2008-1721 Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows… Also affects python
- CVE-2026-110264 An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before… CWE-190
- CVE-2026-53615 util-linux is a random collection of Linux utilities. CWE-190
- CVE-2026-106574 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-190