CVE-2008-1679

원문 설명

Multiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted images that trigger heap-based buffer overflows. NOTE: this issue is due to an incomplete fix for CVE-2007-4965.

영향받는 소프트웨어

• Python < 2.5.3 수정 버전: 2.5.3 정확 일치

상세

공개일

2008-04-22

최종 수정

2024-08-07

CVSS 벡터

AV:N/AC:M/Au:N/C:P/I:P/A:P

참고 자료

• cve.org/CVE-2008-1679
• nvd.nist.gov/vuln/detail/CVE-2008-1679
• lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
• security.gentoo.org/glsa/glsa-200807-01.xml
• secunia.com/advisories/30872
• secunia.com/advisories/38675
• secunia.com/advisories/33937
• secunia.com/advisories/29955
• issues.rpath.com/browse/RPL-2424
• secunia.com/advisories/31687
• www.debian.org/security/2008/dsa-1551
• support.apple.com/kb/HT3438
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10583
• bugs.python.org/msg64682