Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2008-10-31T22:00:00
Updated: 2024-08-07T10:31:28.014Z
Reserved: 2008-10-31T00:00:00
Link: CVE-2008-4864
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2008-11-01T00:00:01.057
Modified: 2022-07-05T18:48:06.887
Link: CVE-2008-4864
Redhat