Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2008-10-31T22:00:00

Updated: 2024-08-07T10:31:28.014Z

Reserved: 2008-10-31T00:00:00

Link: CVE-2008-4864

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2008-11-01T00:00:01.057

Modified: 2022-07-05T18:48:06.887

Link: CVE-2008-4864

cve-icon Redhat

Severity : Low

Publid Date: 2008-10-19T00:00:00Z

Links: CVE-2008-4864 - Bugzilla