CVE-2010-1450
Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote...
CVE-2010-1450 is a high vulnerability (CVSS 7.5) in Python, published May 27, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.88%, the 92nd percentile. Fixed in python 0:2.4.3-43.el5.
Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function.
Exploit likelihood
What each source reports
NVD Score used
7.5
Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function.
- Record
CVE-2010-1450- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-120
- Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function.
- Record
CVE-2010-1450- Updated
- 2026-11-02
EUVDEUVD-2010-1478 No score
Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function.
- Record
EUVD-2010-1478- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rcg8-wv74-2qwr No score
Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote...
Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function.
- Record
GHSA-rcg8-wv74-2qwr- Weakness
- CWE-120
- Updated
- 2026-11-02
OSVPSF-2010-3 No score
rgbimg and imageop overflows
Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function.
- Record
PSF-2010-3- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
pythonRed Hat:enterprise_linux:5::client_workstation |
before 0:2.4.3-43.el5 | 0:2.4.3-43.el5 |
python-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:2.4.3-43.el5 | 0:2.4.3-43.el5 |
python-develRed Hat:enterprise_linux:5::client_workstation |
before 0:2.4.3-43.el5 | 0:2.4.3-43.el5 |
pythonRed Hat:enterprise_linux:5::client |
before 0:2.4.3-43.el5 | 0:2.4.3-43.el5 |
python-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.4.3-43.el5 | 0:2.4.3-43.el5 |
python-libsRed Hat:enterprise_linux:5::client |
before 0:2.4.3-43.el5 | 0:2.4.3-43.el5 |
python-toolsRed Hat:enterprise_linux:5::client |
before 0:2.4.3-43.el5 | 0:2.4.3-43.el5 |
tkinterRed Hat:enterprise_linux:5::client |
before 0:2.4.3-43.el5 | 0:2.4.3-43.el5 |
pythonRed Hat:enterprise_linux:5::server |
before 0:2.4.3-43.el5 | 0:2.4.3-43.el5 |
python-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.4.3-43.el5 | 0:2.4.3-43.el5 |
Show 28 moreShow less
| Package | Affected | Fixed |
|---|---|---|
python-develRed Hat:enterprise_linux:5::server |
before 0:2.4.3-43.el5 | 0:2.4.3-43.el5 |
python-libsRed Hat:enterprise_linux:5::server |
before 0:2.4.3-43.el5 | 0:2.4.3-43.el5 |
python-toolsRed Hat:enterprise_linux:5::server |
before 0:2.4.3-43.el5 | 0:2.4.3-43.el5 |
tkinterRed Hat:enterprise_linux:5::server |
before 0:2.4.3-43.el5 | 0:2.4.3-43.el5 |
pythonRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
python-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
python-develRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
python-docsRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
python-toolsRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
tkinterRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
pythonRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
python-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
python-develRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
python-docsRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
python-toolsRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
tkinterRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
pythonRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
python-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
python-develRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
python-docsRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
python-toolsRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
tkinterRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
pythonRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
python-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
python-develRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
python-docsRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
python-toolsRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
tkinterRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
secunia.com/advisories/43068
support.apple.com/kb/HT4435
vupen.com/english/advisories/2011/0212
secunia.com/advisories/43364
vupen.com/english/advisories/2011/0413
lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
Show 45 moreShow less
vupen.com/english/advisories/2011/0122
bugzilla.redhat.com/show_bug.cgi?id=541698
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
secunia.com/advisories/42888
securityfocus.com/bid/40365
redhat.com/support/errata/RHSA-2011-0027.html
mandriva.com/security/advisories?name=MDVSA-2010:215
bugs.python.org/issue8678
redhat.com/support/errata/RHSA-2011-0260.html
nvd.nist.gov/vuln/detail/CVE-2010-1450
github.com/advisories/GHSA-rcg8-wv74-2qwr
bugs.python.org/issue1179
seclists.org/fulldisclosure/2007/Sep/279
access.redhat.com/errata/RHSA-2011:0027
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=482814
bugzilla.redhat.com/show_bug.cgi?id=569093
bugzilla.redhat.com/show_bug.cgi?id=590690
bugzilla.redhat.com/show_bug.cgi?id=598197
bugzilla.redhat.com/show_bug.cgi?id=609017
bugzilla.redhat.com/show_bug.cgi?id=609020
bugzilla.redhat.com/show_bug.cgi?id=625372
bugzilla.redhat.com/show_bug.cgi?id=644147
bugzilla.redhat.com/show_bug.cgi?id=644761
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0027.json
access.redhat.com/security/cve/CVE-2008-5983
cve.org/CVERecord?id=CVE-2008-5983
nvd.nist.gov/vuln/detail/CVE-2008-5983
access.redhat.com/security/cve/CVE-2009-4134
cve.org/CVERecord?id=CVE-2009-4134
nvd.nist.gov/vuln/detail/CVE-2009-4134
access.redhat.com/security/cve/CVE-2010-1449
cve.org/CVERecord?id=CVE-2010-1449
nvd.nist.gov/vuln/detail/CVE-2010-1449
access.redhat.com/security/cve/CVE-2010-1450
cve.org/CVERecord?id=CVE-2010-1450
access.redhat.com/security/cve/CVE-2010-1634
cve.org/CVERecord?id=CVE-2010-1634
nvd.nist.gov/vuln/detail/CVE-2010-1634
access.redhat.com/security/cve/CVE-2010-2089
cve.org/CVERecord?id=CVE-2010-2089
nvd.nist.gov/vuln/detail/CVE-2010-2089
access.redhat.com/errata/RHSA-2011:0260
bugzilla.redhat.com/show_bug.cgi?id=497540
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0260.json