CVE-2010-1449

Published: May 27, 2010Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12.

Affected (1)

Products: Python: Python

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Python Python	Version 2.5.0

Related CWEs

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (30)

http://bugs.python.org/issue8678

Source: secalert@redhat.com

Vendor Advisory

http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html

Source: secalert@redhat.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/42888

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/43068

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/43364

Source: secalert@redhat.com

Broken Link

http://support.apple.com/kb/HT4435

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2010:215

Source: secalert@redhat.com

Broken Link

http://www.redhat.com/support/errata/RHSA-2011-0027.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2011-0260.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/bid/40363

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2011/0122

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2011/0212

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2011/0413

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=541698

Source: secalert@redhat.com

Issue TrackingPatch

http://bugs.python.org/issue8678

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://secunia.com/advisories/42888

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/43068

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/43364

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://support.apple.com/kb/HT4435

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2010:215

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.redhat.com/support/errata/RHSA-2011-0027.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2011-0260.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.securityfocus.com/bid/40363

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2011/0122

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.vupen.com/english/advisories/2011/0212

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.vupen.com/english/advisories/2011/0413

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=541698

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatch

Timeline

No history available yet.