NVD

Id
4653  
Name
CVE-2008-4864  
Description
Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-10-31  
Modified Date
2012-10-30  
Seq
2008-4864  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
29187 4653 CVE-2008-4864 APPLE-SA-2009-02-12  View
29188 4653 CVE-2008-4864 oval:org.mitre.oval:def:10702  View
29189 4653 CVE-2008-4864 oval:org.mitre.oval:def:8354  View
29190 4653 CVE-2008-4864 http://scary.beasts.org/security/CESA-2008-008.html  View
29191 4653 CVE-2008-4864 http://support.apple.com/kb/HT3438  View
29192 4653 CVE-2008-4864 http://svn.python.org/view/python/trunk/Modules/imageop.c?rev=66689&view=diff&r1=66689&r2=66688&p1=python/trunk/Modules/imageop.c&p2=/python/trunk/Modules/imageop.c  View
29193 4653 CVE-2008-4864 http://svn.python.org/view?rev=66689&view=rev  View
29194 4653 CVE-2008-4864 [oss-security] 20081027 CVE request -- Python imageop#3  View
29195 4653 CVE-2008-4864 [oss-security] 20081029 CVE Request - Python imageop  View
29196 4653 CVE-2008-4864 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
29197 4653 CVE-2008-4864 31932  View
29198 4653 CVE-2008-4864 31976  View
29199 4653 CVE-2008-4864 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
29200 4653 CVE-2008-4864 ADV-2009-3316  View
29201 4653 CVE-2008-4864 python-image-module-bo(46606)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46988 JVNDB-2008-002298 Python の imageop モジュールにおける整数オーバーフローの脆弱性 Python の imageop モジュール内の imageop.c には、crop 関数に対する大きな整数値の処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2008-4864 34977 CVE-2008-4864 4653 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002298.html 2008-11-01 2009-10-06 View