Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-1450
HistoryMay 27, 2010 - 12:00 a.m.

CVE-2010-1450

2010-05-2700:00:00
ubuntu.com
ubuntu.com
10

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.016 Low

EPSS

Percentile

87.4%

Multiple buffer overflows in the RLE decoder in the rgbimg module in Python
2.5 allow remote attackers to have an unspecified impact via an image file
containing crafted data that triggers improper processing within the (1)
longimagedata or (2) expandrow function.

Notes

Author Note
jdstrand per upstream, python2.6 not affected fix for CVE-2007-4965 also fixed the rgbimg module. This CVE was assigned after the fact.

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.016 Low

EPSS

Percentile

87.4%