Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Python | — | Apply OS X security update 2007-009Apply OS X security update 2009-001 | Dec 16, 2011 | Sep 18, 2007 |
| Centos_linux | — | Upgrade python-develUpgrade python-toolsUpgrade tkinterUpgrade python | Dec 1, 2016 | Sep 18, 2007 |
| Gentoo Linux | — | Upgrade dev-lang/python. | Oct 30, 2017 | Sep 18, 2007 |
| Oracle_linux | — | Upgrade pythonUpgrade python-develUpgrade tkinterUpgrade python-tools | Oct 16, 2024 | Sep 18, 2007 |
| Suse | — | Upgrade python-idleUpgrade python-x86Upgrade python-tkUpgrade python-develUpgrade python-32bitUpgrade python-64bitUpgrade python-gdbmUpgrade python-doc-pdfUpgrade pythonUpgrade python-demoUpgrade python-cursesUpgrade python-xmlUpgrade python-docUpgrade suse-releaseUpgrade python-mpz | Feb 17, 2015 | Sep 18, 2007 |
| Ubuntu | — | Upgrade python2.4Upgrade python2.5 | Nov 8, 2024 | Sep 18, 2007 |
| Vmsa 2009 0016 5 Updated Service Console Package Python | — | Upgrade VMware ESX 3.5 to build number 226117Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Sep 18, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub