Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-1449
HistoryMay 27, 2010 - 12:00 a.m.

CVE-2010-1449

2010-05-2700:00:00
ubuntu.com
ubuntu.com
7

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.037 Low

EPSS

Percentile

91.6%

Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5
allows remote attackers to have an unspecified impact via a large image
that triggers a buffer overflow. NOTE: this vulnerability exists because of
an incomplete fix for CVE-2008-3143.12.

Notes

Author Note
jdstrand per upstream, python2.6 not affected fix for CVE-2007-4965 also fixed the rgbimg module. This CVE was assigned after the fact.

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.037 Low

EPSS

Percentile

91.6%