CVE-2007-4965 | BDVDB-2026-26403 Detail
Description#
Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://lists.vmware.com/pipermail/security-announce/2008/000005.html
- http://www.securityfocus.com/bid/25696
- http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0254
- http://www.vupen.com/english/advisories/2007/4238
- http://secunia.com/advisories/38675
- http://www.us-cert.gov/cas/techalerts/TA07-352A.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8496
- http://secunia.com/advisories/33937
- http://secunia.com/advisories/28136
- http://secunia.com/advisories/37471
- http://secunia.com/advisories/27460
- http://secunia.com/advisories/28480
- http://secunia.com/advisories/26837
- http://www.vupen.com/english/advisories/2007/3201
- http://www.debian.org/security/2008/dsa-1551
Show all 40
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html
- http://secunia.com/advisories/29303
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8486
- http://support.apple.com/kb/HT3438
- http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
- http://secunia.com/advisories/27872
- http://secunia.com/advisories/29032
- http://secunia.com/advisories/31492
- https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00378.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10804
- http://www.redhat.com/support/errata/RHSA-2008-0629.html
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065826.html
- http://www.securityfocus.com/archive/1/488457/100/0/threaded
- http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
- http://www.redhat.com/support/errata/RHSA-2007-1076.html
- http://www.securityfocus.com/archive/1/507985/100/0/threaded
- http://www.vupen.com/english/advisories/2008/0637
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36653
- http://bugs.gentoo.org/show_bug.cgi?id=192876
- http://docs.info.apple.com/article.html?artnum=307179
- http://secunia.com/advisories/27562
- http://www.ubuntu.com/usn/usn-585-1
- http://www.gentoo.org/security/en/glsa/glsa-200711-07.xml
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:012
- http://support.avaya.com/css/P8/documents/100074697
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.