Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2008-10-31T22:00:00

Updated: 2024-08-07T10:31:28.014Z

Reserved: 2008-10-31T00:00:00

Link: CVE-2008-4864

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2008-11-01T00:00:01.057

Modified: 2024-11-21T00:52:42.213

Link: CVE-2008-4864

cve-icon Redhat

Severity : Low

Publid Date: 2008-10-19T00:00:00Z

Links: CVE-2008-4864 - Bugzilla