Integer overflow in Python - CVE-2007-4965

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU110167

Integer overflow in Python - CVE-2007-4965

Published: August 2, 2023 / Updated: June 3, 2025


Vulnerability identifier: #VU110167
CSH Severity: Medium
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/U:Green
CVE-ID: CVE-2007-4965
CWE-ID: CWE-190
Exploitation vector: Remote access
Exploit availability: Public exploit is available
Vendor: Python.org
Affected software:
Python

Detailed vulnerability description

The vulnerability allows a remote non-authenticated attacker to read memory contents or crash the application.

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.


How to mitigate CVE-2007-4965

Install update from vendor's website.

Sources