vulnwire
5.8med

CVE-2007-49651 exploit

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
5.8
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
14.0%
percentile 97%
Public exploits
1
Exploit-DB

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.

Exploit prediction (EPSS)

13.95% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.

Exploits and detections

  • EDB-30592 Python 2.2 ImageOP Module - Multiple Integer Overflow Vulnerabilities · dos · 2007-09-17

CVSS scores

Assigned byVersionScoreVector
NVD2.05.8AV:N/AC:M/Au:N/C:P/I:N/A:P

Classification

Weakness
  • CWE-190 Integer Overflow or Wraparound

References

  • lists.vmware.com /pipermail/security-announce/2008/000005.html · mailing-list, x_refsource_MLIST, x_transferred
  • securityfocus.com /bid/25696 · vdb-entry, x_refsource_BID, x_transferred
  • wiki.rpath.com /wiki/Advisories:rPSA-2007-0254 · x_refsource_CONFIRM, x_transferred
  • vupen.com /english/advisories/2007/4238 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/38675 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • us-cert.gov /cas/techalerts/TA07-352A.html · third-party-advisory, x_refsource_CERT, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8496 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • secunia.com /advisories/33937 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/28136 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/37471 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/27460 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/28480 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/26837 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2007/3201 · vdb-entry, x_refsource_VUPEN, x_transferred
  • debian.org /security/2008/dsa-1551 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • vmware.com /security/advisories/VMSA-2009-0016.html · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/29303 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8486 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • support.apple.com /kb/HT3438 · x_refsource_CONFIRM, x_transferred
  • lists.apple.com /archives/security-announce/2009/Feb/msg00000.html · vendor-advisory, x_refsource_APPLE, x_transferred
  • secunia.com /advisories/27872 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/29032 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/31492 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • redhat.com /archives/fedora-package-announce/2007-October/msg00378.html · vendor-advisory, x_refsource_FEDORA, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10804 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • redhat.com /support/errata/RHSA-2008-0629.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • lists.grok.org.uk /pipermail/full-disclosure/2007-September/065826.html · mailing-list, x_refsource_FULLDISC, x_transferred
  • securityfocus.com /archive/1/488457/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • lists.apple.com /archives/security-announce/2007/Dec/msg00002.html · vendor-advisory, x_refsource_APPLE, x_transferred
  • redhat.com /support/errata/RHSA-2007-1076.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • securityfocus.com /archive/1/507985/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • vupen.com /english/advisories/2008/0637 · vdb-entry, x_refsource_VUPEN, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/36653 · vdb-entry, x_refsource_XF, x_transferred
  • bugs.gentoo.org /show_bug.cgi?id=192876 · x_refsource_CONFIRM, x_transferred
  • docs.info.apple.com /article.html?artnum=307179 · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/27562 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • ubuntu.com /usn/usn-585-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • gentoo.org /security/en/glsa/glsa-200711-07.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • mandriva.com /security/advisories?name=MDVSA-2008:012 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • support.avaya.com /css/P8/documents/100074697 · x_refsource_CONFIRM, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2008-02/msg00003.html · Third Party Advisory
  • secunia.com /advisories/28838 · Broken Link
  • secunia.com /advisories/29889 · Broken Link
  • secunia.com /advisories/31255 · Broken Link
  • debian.org /security/2008/dsa-1620 · Third Party Advisory
  • mandriva.com /security/advisories?name=MDVSA-2008:013 · Broken Link
  • securityfocus.com /archive/1/487990/100/0/threaded · Third Party Advisory, VDB Entry

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.