#VU110167 Integer overflow in Python - CVE-2007-4965

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU110167

#VU110167 Integer overflow in Python - CVE-2007-4965

Published: August 2, 2023 / Updated: June 3, 2025


Vulnerability identifier: #VU110167
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/U:Green
CVE-ID: CVE-2007-4965
CWE-ID: CWE-190
Exploitation vector: Remote access
Exploit availability: Public exploit is available
Vulnerable software:
Python
Software vendor:
Python.org

Description

The vulnerability allows a remote non-authenticated attacker to read memory contents or crash the application.

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.


Remediation

Install update from vendor's website.

External links