Lucene search
K

48 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 6:10 a.m.1 views

SUSE CVE-2007-4965

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service application crash and possibly obtain sensitive information memory contents via crafted arguments to 1 the tovideo method, and unspecified other vectors...

5.8CVSS7AI score0.05028EPSS
Exploits1References6
Veracode
Veracode
added 2020/04/10 12:39 a.m.21 views

Arbitrary Code Execution

python is vulnerable to arbitrary code execution. Multiple integer overflow flaws were found in the Python imageop module. If a Python application used the imageop module to process untrusted images, it could cause the application to crash or, potentially, execute arbitrary code with the Python...

6.8CVSS5AI score0.00447EPSS
Exploits0References31Affected Software1
Veracode
Veracode
added 2020/04/10 12:35 a.m.23 views

Arbitrary Code Execution

python is vulnerable to arbitrary code execution. Multiple integer overflow flaws were found in the Python imageop module. If a Python application used the imageop module to process untrusted images, it could cause the application to disclose sensitive information, crash or, potentially, execute...

7.5CVSS4.2AI score0.10929EPSS
Exploits6References19Affected Software1
Veracode
Veracode
added 2020/04/10 12:35 a.m.33 views

Arbitrary Code Execution

python is vulnerable to Arbitrary Code Execution. Multiple integer overflow flaws were found in the Python imageop module. If a Python application used the imageop module to process untrusted images, it could cause the application to disclose sensitive information, crash or, potentially, execute...

5.8CVSS7.4AI score0.05028EPSS
Exploits1References51Affected Software1
0day.today
0day.today
added 2015/11/02 12:0 a.m.23 views

Python 2.7 check_multiply_size() Integer Overflow Vulnerability

Several functions within the imageop module are vulnerable to exploitable buffer overflows due to unsafe arithmetic in checkmultiplysize. The problem exists because the check to confirm that size == product / y / x does not take remainders into account. Title: Python 2.7 checkmultiplysize Integer...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2015/02/11 1:8 p.m.15 views

Python-2.2-ImageOP-Integer-Overflow

Python's imageop module is prone to multiple integer-overflow vulnerabilities because it fails to properly bounds-check user-supplied input to ensure that integer operations do not overflow. To successfully exploit these issues, an attacker must be able to control the arguments to imageop...

4.6AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.18 views

Python 2.2 ImageOP Module Multiple Integer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/25696/info Python's imageop module is prone to multiple integer-overflow vulnerabilities because it fails to properly bounds-check user-supplied input to ensure that integer operations do not overflow. To successfully...

7.1AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2013/07/12 12:0 a.m.36 views

Oracle Linux 5 : python (ELSA-2009-1176)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1176 advisory. - Multiple integer overflows in python core CVE-2008-2315 - PyStringFromStringAndSize does not check for negative size values CVE-2008-1887 - Multiple...

10CVSS7.4AI score0.28409EPSS
Exploits17References11
Tenable Nessus
Tenable Nessus
added 2013/07/12 12:0 a.m.33 views

Oracle Linux 3 / 4 : python (ELSA-2007-1076)

From Red Hat Security Advisory 2007:1076 : Updated python packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Python is an interpreted, interactive,...

6.8CVSS7.9AI score0.13743EPSS
Exploits2References5
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:0 a.m.26 views

SuSE 10 Security Update : Python (ZYPP Patch Number 5837)

Integer Overflows in the python imageop module and in the expandtabs method potentially allowed attackers to execute arbitrary code. CVE-2008-4864 / CVE-2008-5031 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

10CVSS5.9AI score0.10929EPSS
Exploits9References4
OpenVAS
OpenVAS
added 2009/07/29 12:0 a.m.23 views

Ubuntu USN-806-1 (python2.5)

The remote host is missing an update to python2.5 announced via advisory USN-806-1. OpenVAS Vulnerability Test $Id: ubuntu8061.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8061.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-806-1 python2.5 Authors: Thoma...

10CVSS0.8AI score0.10929EPSS
Exploits9References1
RedHat Linux
RedHat Linux
added 2009/07/27 9:34 a.m.1 views

python: imageop module integer overflows

Multiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via crafted images that trigger heap-based buffer overflows. NOTE: this issue is due to an incomplete fix for CVE-2007-4965...

6.8CVSS6.6AI score0.05028EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2009/07/27 9:32 a.m.1 views

python: imageop module multiple integer overflows

Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different...

7.5CVSS6.6AI score0.10929EPSS
Exploits7References4
RedHat Linux
RedHat Linux
added 2009/07/27 9:22 a.m.2 views

python imageop module heap corruption

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service application crash and possibly obtain sensitive information memory contents via crafted arguments to 1 the tovideo method, and unspecified other vectors...

5.8CVSS6.2AI score0.05028EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2009/07/27 9:22 a.m.3 views

python: imageop module multiple integer overflows

Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different...

7.5CVSS6.6AI score0.10929EPSS
Exploits7References4
Oracle linux
Oracle linux
added 2009/07/27 12:0 a.m.54 views

python security update

2.4.3-24.el53.6 - Fix all of the low priority security bugs: - Resolves: rhbz486351 - Multiple integer overflows in python core CVE-2008-2315 - Resolves: 455008 - PyStringFromStringAndSize does not check for negative size values CVE-2008-1887 - Resolves: 443810 - Multiple integer overflows...

10CVSS2.5AI score0.28409EPSS
Exploits17
Oracle linux
Oracle linux
added 2009/07/27 12:0 a.m.47 views

python security update

2.3.4-14.7.el48.2 - Fix all of the low priority security bugs: - Resolves: rhbz486329 - Multiple integer overflows in python core CVE-2008-2315 - Resolves: 455008 - PyStringFromStringAndSize does not check for negative size values CVE-2008-1887 - Resolves: 443810 - Multiple integer overflows...

10CVSS3.4AI score0.28409EPSS
Exploits15
Ubuntu
Ubuntu
added 2009/07/23 7:6 p.m.56 views

USN-806-1: Python vulnerabilities

It was discovered that Python incorrectly handled certain arguments in the imageop module. If an attacker were able to pass specially crafted arguments through the crop function, they could execute arbitrary code with user privileges. For Python 2.5, this issue only affected Ubuntu 8.04 LTS...

10CVSS6.1AI score0.10929EPSS
Exploits9
OpenVAS
OpenVAS
added 2009/04/09 12:0 a.m.25 views

Mandriva Update for python MDVSA-2008:013 (python)

Check for the Version of python OpenVAS Vulnerability Test Mandriva Update for python MDVSA-2008:013 python Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

5.8CVSS0.05028EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2009/04/09 12:0 a.m.32 views

Mandriva Update for python MDVSA-2008:013 (python)

Check for the Version of python OpenVAS Vulnerability Test Mandriva Update for python MDVSA-2008:013 python Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

5.8CVSS0.1AI score0.05028EPSS
Exploits1References2
Rows per page
Query Builder