Every CVE Search/ Get API key

CVE-2010-1449

Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to...

7.5 HighFix available

CVE-2010-1449 is a high vulnerability (CVSS 7.5) in Python, published May 27, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.88%, the 92nd percentile. Fixed in python 0:2.4.3-43.el5.

Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12.

Exploit likelihood

4.88%Up 1.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12.

Record
CVE-2010-1449
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-190
Updated
2026-11-02
CVE List No score

Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12.

Record
CVE-2010-1449
Updated
2026-11-02
EUVDEUVD-2010-1477 No score

Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12.

Record
EUVD-2010-1477
Updated
2026-11-03
GitHub AdvisoriesGHSA-5737-j7gj-9mpw No score

Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to...

Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12.

Record
GHSA-5737-j7gj-9mpw
Weakness
CWE-190
Updated
2026-11-02
OSVPSF-2010-2 No score

rgbimg and imageop overflows

Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12.

Record
PSF-2010-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
python
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.4.3-43.el5
0:2.4.3-43.el5
python-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.4.3-43.el5
0:2.4.3-43.el5
python-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.4.3-43.el5
0:2.4.3-43.el5
python
Red Hat:enterprise_linux:5::client
 before 0:2.4.3-43.el5
0:2.4.3-43.el5
python-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:2.4.3-43.el5
0:2.4.3-43.el5
python-libs
Red Hat:enterprise_linux:5::client
 before 0:2.4.3-43.el5
0:2.4.3-43.el5
python-tools
Red Hat:enterprise_linux:5::client
 before 0:2.4.3-43.el5
0:2.4.3-43.el5
tkinter
Red Hat:enterprise_linux:5::client
 before 0:2.4.3-43.el5
0:2.4.3-43.el5
python
Red Hat:enterprise_linux:5::server
 before 0:2.4.3-43.el5
0:2.4.3-43.el5
python-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.4.3-43.el5
0:2.4.3-43.el5
Show 28 moreShow less
Affected packages
PackageAffectedFixed
python-devel
Red Hat:enterprise_linux:5::server
 before 0:2.4.3-43.el5
0:2.4.3-43.el5
python-libs
Red Hat:enterprise_linux:5::server
 before 0:2.4.3-43.el5
0:2.4.3-43.el5
python-tools
Red Hat:enterprise_linux:5::server
 before 0:2.4.3-43.el5
0:2.4.3-43.el5
tkinter
Red Hat:enterprise_linux:5::server
 before 0:2.4.3-43.el5
0:2.4.3-43.el5
python
Red Hat:enterprise_linux:4::as
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4
python-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4
python-devel
Red Hat:enterprise_linux:4::as
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4
python-docs
Red Hat:enterprise_linux:4::as
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4
python-tools
Red Hat:enterprise_linux:4::as
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4
tkinter
Red Hat:enterprise_linux:4::as
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4
python
Red Hat:enterprise_linux:4::desktop
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4
python-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4
python-devel
Red Hat:enterprise_linux:4::desktop
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4
python-docs
Red Hat:enterprise_linux:4::desktop
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4
python-tools
Red Hat:enterprise_linux:4::desktop
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4
tkinter
Red Hat:enterprise_linux:4::desktop
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4
python
Red Hat:enterprise_linux:4::es
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4
python-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4
python-devel
Red Hat:enterprise_linux:4::es
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4
python-docs
Red Hat:enterprise_linux:4::es
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4
python-tools
Red Hat:enterprise_linux:4::es
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4
tkinter
Red Hat:enterprise_linux:4::es
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4
python
Red Hat:enterprise_linux:4::ws
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4
python-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4
python-devel
Red Hat:enterprise_linux:4::ws
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4
python-docs
Red Hat:enterprise_linux:4::ws
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4
python-tools
Red Hat:enterprise_linux:4::ws
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4
tkinter
Red Hat:enterprise_linux:4::ws
 before 0:2.3.4-14.9.el4
0:2.3.4-14.9.el4

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 45 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open