6.8

CVE-2008-1679

Multiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted images that trigger heap-based buffer overflows.  NOTE: this issue is due to an incomplete fix for CVE-2007-4965.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Python ≫ Python Version < 2.5.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.03% 0.893
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
Mailing List
http://secunia.com/advisories/33937
Broken Link
http://support.apple.com/kb/HT3438
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
Third Party Advisory
http://secunia.com/advisories/31687
Broken Link
http://secunia.com/advisories/29889
Patch
Vendor Advisory
http://secunia.com/advisories/31255
Broken Link
http://www.debian.org/security/2008/dsa-1551
Patch
Third Party Advisory
http://www.debian.org/security/2008/dsa-1620
Third Party Advisory
http://secunia.com/advisories/38675
Broken Link
http://support.avaya.com/css/P8/documents/100074697
Third Party Advisory
http://secunia.com/advisories/29955
Broken Link
http://secunia.com/advisories/30872
Broken Link
http://secunia.com/advisories/31358
Broken Link
http://secunia.com/advisories/31365
Broken Link
http://security.gentoo.org/glsa/glsa-200807-01.xml
Third Party Advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289
Third Party Advisory
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0149
Third Party Advisory
http://www.ubuntu.com/usn/usn-632-1
Third Party Advisory
http://secunia.com/advisories/31518
Broken Link
http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900
Third Party Advisory
http://bugs.python.org/issue1179
Vendor Advisory
Issue Tracking
http://bugs.python.org/msg64682
Vendor Advisory
Issue Tracking
http://www.mandriva.com/security/advisories?name=MDVSA-2008:163
Third Party Advisory
Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2008:164
Third Party Advisory
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/41958
VDB Entry
https://issues.rpath.com/browse/RPL-2424
Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10583
Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7800
Broken Link