CVE-2007-4965
Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context...
CVE-2007-4965 is a medium vulnerability (CVSS 5.8) in Python, published September 18, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 14.0%, the 96th percentile. Fixed in python2.4 2.4.4-3+etch1.
Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.
Exploit likelihood
What each source reports
NVD Score used
Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.
- Record
CVE-2007-4965- CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:P - Weakness
- CWE-190
- Updated
- 2026-11-02
CVE List No score
Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.
- Record
CVE-2007-4965- Updated
- 2026-11-02
EUVDEUVD-2007-4946 No score
Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.
- Record
EUVD-2007-4946- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m9f3-5w45-2j8h No score
Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context...
Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.
- Record
GHSA-m9f3-5w45-2j8h- Weakness
- CWE-190
- Updated
- 2026-11-02
OSVAZL-109557 No score
CVE-2007-4965 affecting package python-py 1.11.0-1
Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.
- Record
AZL-109557- Updated
- 2026-11-02
OSVPSF-2007-1 No score
rgbimg and imageop overflows
Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.
- Record
PSF-2007-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
python-pyAzure Linux:3 |
through 1.11.0-1 | None known |
python2.4Debian:4.0 |
before 2.4.4-3+etch1, plus listed versions 2.4.4-3 |
2.4.4-3+etch1 |
python2.5Debian:4.0 |
before 2.5-5+etch1, plus listed versions 2.5-5 |
2.5-5+etch1 |
pythonRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.8 | 0:2.2.3-6.8 |
python-debuginfoRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.8 | 0:2.2.3-6.8 |
python-develRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.8 | 0:2.2.3-6.8 |
python-toolsRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.8 | 0:2.2.3-6.8 |
tkinterRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.8 | 0:2.2.3-6.8 |
pythonRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.8 | 0:2.2.3-6.8 |
python-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.8 | 0:2.2.3-6.8 |
Show 57 moreShow less
| Package | Affected | Fixed |
|---|---|---|
python-develRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.8 | 0:2.2.3-6.8 |
python-toolsRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.8 | 0:2.2.3-6.8 |
tkinterRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.8 | 0:2.2.3-6.8 |
pythonRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.8 | 0:2.2.3-6.8 |
python-debuginfoRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.8 | 0:2.2.3-6.8 |
python-develRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.8 | 0:2.2.3-6.8 |
python-toolsRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.8 | 0:2.2.3-6.8 |
tkinterRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.8 | 0:2.2.3-6.8 |
pythonRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.8 | 0:2.2.3-6.8 |
python-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.8 | 0:2.2.3-6.8 |
python-develRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.8 | 0:2.2.3-6.8 |
python-toolsRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.8 | 0:2.2.3-6.8 |
tkinterRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.8 | 0:2.2.3-6.8 |
pythonRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
python-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
python-develRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
python-docsRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
python-toolsRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
tkinterRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
pythonRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
python-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
python-develRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
python-docsRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
python-toolsRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
tkinterRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
pythonRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
python-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
python-develRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
python-docsRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
python-toolsRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
tkinterRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
pythonRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
python-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
python-develRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
python-docsRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
python-toolsRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
tkinterRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.4.el4_6.1 | 0:2.3.4-14.4.el4_6.1 |
rhn-solaris-bootstrapRed Hat:network_satellite:5.0:el4 |
before 0:5.0.2-3 | 0:5.0.2-3 |
rhn_solaris_bootstrap_5_0_2_3Red Hat:network_satellite:5.0:el4 |
before 0:1-0 | 0:1-0 |
rhn-solaris-bootstrapRed Hat:network_satellite:4.2::el3 |
before 0:5.0.2-3 | 0:5.0.2-3 |
rhn_solaris_bootstrap_5_0_2_3Red Hat:network_satellite:4.2::el3 |
before 0:1-0 | 0:1-0 |
rhn-solaris-bootstrapRed Hat:network_satellite:4.2::el4 |
before 0:5.0.2-3 | 0:5.0.2-3 |
rhn_solaris_bootstrap_5_0_2_3Red Hat:network_satellite:4.2::el4 |
before 0:1-0 | 0:1-0 |
rhn-solaris-bootstrapRed Hat:network_satellite:5.1::el4 |
before 0:5.1.1-3 | 0:5.1.1-3 |
rhn_solaris_bootstrap_5_1_1_3Red Hat:network_satellite:5.1::el4 |
before 0:1-0 | 0:1-0 |
pythonRed Hat:enterprise_linux:5::client_workstation |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
python-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
python-develRed Hat:enterprise_linux:5::client_workstation |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
pythonRed Hat:enterprise_linux:5::client |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
python-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
python-toolsRed Hat:enterprise_linux:5::client |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
tkinterRed Hat:enterprise_linux:5::client |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
pythonRed Hat:enterprise_linux:5::server |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
python-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
python-develRed Hat:enterprise_linux:5::server |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
python-toolsRed Hat:enterprise_linux:5::server |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
tkinterRed Hat:enterprise_linux:5::server |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Python 2.2 ImageOP Module - Multiple Integer Overflow Vulnerabilities | 2007-09-17 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | affected, aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories, OSV |
| 2026-11-02 | created | CVE List, NVD |
References
lists.vmware.com/pipermail/security-announce/2008/000005.html
securityfocus.com/bid/25696
wiki.rpath.com/wiki/Advisories:rPSA-2007-0254
vupen.com/english/advisories/2007/4238
secunia.com/advisories/38675
us-cert.gov/cas/techalerts/TA07-352A.html
Show 143 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8496
debian.org/security/2008/dsa-1551
vmware.com/security/advisories/VMSA-2009-0016.html
support.apple.com/kb/HT3438
lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
redhat.com/archives/fedora-package-announce/2007-October/msg00378.html
lists.grok.org.uk/pipermail/full-disclosure/2007-September/065826.html
exchange.xforce.ibmcloud.com/vulnerabilities/36653
bugs.gentoo.org/show_bug.cgi?id=192876
docs.info.apple.com/article.html?artnum=307179
ubuntu.com/usn/usn-585-1
gentoo.org/security/en/glsa/glsa-200711-07.xml
mandriva.com/security/advisories?name=MDVSA-2008:012
support.avaya.com/css/P8/documents/100074697
lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html
issues.rpath.com/browse/RPL-1885
nvd.nist.gov/vuln/detail/CVE-2007-4965
github.com/advisories/GHSA-m9f3-5w45-2j8h
bugs.python.org/issue1179
seclists.org/fulldisclosure/2007/Sep/279
bugzilla.redhat.com/show_bug.cgi?id=541698
access.redhat.com/errata/RHSA-2007:1076
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_1076.json
cve.org/CVERecord?id=CVE-2006-7228