CVE-2007-4965

Description

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
4.338

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in Python 2.5.1Windows
Multiple Vulnerabilities are affected in Python for MAC 1.5.2Mac
Multiple Vulnerabilities are affected in Python for MAC 1.6Mac
Multiple Vulnerabilities are affected in Python for MAC 1.6.1Mac
Multiple Vulnerabilities are affected in Python for MAC 2.0Mac
Multiple Vulnerabilities are affected in Python for MAC 2.0.1Mac
Multiple Vulnerabilities are affected in Python for MAC 2.1Mac
Multiple Vulnerabilities are affected in Python for MAC 2.1.1Mac
Multiple Vulnerabilities are affected in Python for MAC 2.1.2Mac
Multiple Vulnerabilities are affected in Python for MAC 2.1.3Mac
Multiple Vulnerabilities are affected in Python for MAC 2.2Mac
Multiple Vulnerabilities are affected in Python for MAC 2.2.1Mac
Multiple Vulnerabilities are affected in Python for MAC 2.2.2Mac
Multiple Vulnerabilities are affected in Python for MAC 2.2.3Mac
Multiple Vulnerabilities are affected in Python for MAC 2.3Mac
Multiple Vulnerabilities are affected in Python for MAC 2.3.1Mac
Multiple Vulnerabilities are affected in Python for MAC 2.3.2Mac
Multiple Vulnerabilities are affected in Python for MAC 2.3.3Mac
Multiple Vulnerabilities are affected in Python for MAC 2.3.4Mac
Multiple Vulnerabilities are affected in Python for MAC 2.3.5Mac
Multiple Vulnerabilities are affected in Python for MAC 2.3.6Mac
Multiple Vulnerabilities are affected in Python for MAC 2.4Mac
Multiple Vulnerabilities are affected in Python for MAC 2.4.1Mac
Multiple Vulnerabilities are affected in Python for MAC 2.4.2Mac
Multiple Vulnerabilities are affected in Python for MAC 2.4.3Mac
Multiple Vulnerabilities are affected in Python for MAC 2.4.4Mac
Multiple Vulnerabilities are affected in Python for MAC 2.5Mac
Multiple Vulnerabilities are affected in Python for MAC 2.5.1Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7
PATCH-611773Python for MAC 3.13.7

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234