CVE-2008-1679

Published: Apr 22, 2008Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted images that trigger heap-based buffer overflows. NOTE: this issue is due to an incomplete fix for CVE-2007-4965.

Affected (1)

Products: Python: Python

Python

1 product

Python

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Python Python	Before 2.5.3

Related CWEs

CWE-190

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (58)

http://bugs.python.org/issue1179

Source: cve@mitre.org

Issue TrackingVendor Advisory

http://bugs.python.org/msg64682

Source: cve@mitre.org

Issue TrackingVendor Advisory

http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html

Source: cve@mitre.org

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/29889

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/29955

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/30872

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/31255

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/31358

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/31365

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/31518

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/31687

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/33937

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/38675

Source: cve@mitre.org

Broken Link

http://security.gentoo.org/glsa/glsa-200807-01.xml

Source: cve@mitre.org

Third Party Advisory

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289

Source: cve@mitre.org

Third Party Advisory

http://support.apple.com/kb/HT3438

Source: cve@mitre.org

Third Party Advisory

http://support.avaya.com/css/P8/documents/100074697

Source: cve@mitre.org

Third Party Advisory

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0149

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2008/dsa-1551

Source: cve@mitre.org

PatchThird Party Advisory

http://www.debian.org/security/2008/dsa-1620

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2008:163

Source: cve@mitre.org

Broken LinkThird Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2008:164

Source: cve@mitre.org

Broken LinkThird Party Advisory

http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/usn-632-1

Source: cve@mitre.org

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/41958

Source: cve@mitre.org

VDB Entry

https://issues.rpath.com/browse/RPL-2424

Source: cve@mitre.org

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10583

Source: cve@mitre.org

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7800

Source: cve@mitre.org

Broken Link

http://bugs.python.org/issue1179