Every CVESearch/Get API key

CVE-2007-4965

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context...

5.8 MediumPublic exploit

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.

Exploit likelihood

14.0%Down 1.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used5.8

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.

Record
CVE-2007-4965
CVSS 2.0
5.8 MediumAV:N/AC:M/Au:N/C:P/I:N/A:P
Weakness
CWE-190
Updated
2026-11-02
CVE ListNo score

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.

Record
CVE-2007-4965
Updated
2026-11-02
EUVDEUVD-2007-4946No score

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.

Record
EUVD-2007-4946
Updated
2026-11-03
GitHub AdvisoriesGHSA-m9f3-5w45-2j8hNo score

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context...

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.

Record
GHSA-m9f3-5w45-2j8h
Weakness
CWE-190
Updated
2026-11-02
OSVRHSA-2008:02649.1

Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update

Record
RHSA-2008:0264
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-13
OSVRHSA-2008:05259.1

Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update

Record
RHSA-2008:0525
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-13
OSVRHSA-2008:06299.1

Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update

Record
RHSA-2008:0629
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-13
OSVAZL-109557No score

CVE-2007-4965 affecting package python-py 1.11.0-1

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.

Record
AZL-109557
Updated
2026-11-02
OSVPSF-2007-1No score

rgbimg and imageop overflows

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.

Record
PSF-2007-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
python-py
Azure Linux:3
through 1.11.0-1None known
python2.4
Debian:4.0
From an advisory covering 5 CVEs
before 2.4.4-3+etch1, plus listed versions
2.4.4-3
2.4.4-3+etch1
python2.5
Debian:4.0
From an advisory covering 5 CVEs
before 2.5-5+etch1, plus listed versions
2.5-5
2.5-5+etch1
python
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python-debuginfo
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python-devel
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python-tools
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
tkinter
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python-debuginfo
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
Show 57 moreShow less
Affected packages
PackageAffectedFixed
python-devel
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python-tools
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
tkinter
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python-debuginfo
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python-devel
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python-tools
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
tkinter
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python-debuginfo
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python-devel
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python-tools
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
tkinter
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-docs
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-tools
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
tkinter
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-docs
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-tools
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
tkinter
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-docs
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-tools
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
tkinter
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-docs
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-tools
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
tkinter
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
rhn-solaris-bootstrap
Red Hat:network_satellite:5.0:el4
From an advisory covering 12 CVEs
before 0:5.0.2-3
0:5.0.2-3
rhn_solaris_bootstrap_5_0_2_3
Red Hat:network_satellite:5.0:el4
From an advisory covering 12 CVEs
before 0:1-0
0:1-0
rhn-solaris-bootstrap
Red Hat:network_satellite:4.2::el3
From an advisory covering 12 CVEs
before 0:5.0.2-3
0:5.0.2-3
rhn_solaris_bootstrap_5_0_2_3
Red Hat:network_satellite:4.2::el3
From an advisory covering 12 CVEs
before 0:1-0
0:1-0
rhn-solaris-bootstrap
Red Hat:network_satellite:4.2::el4
From an advisory covering 12 CVEs
before 0:5.0.2-3
0:5.0.2-3
rhn_solaris_bootstrap_5_0_2_3
Red Hat:network_satellite:4.2::el4
From an advisory covering 12 CVEs
before 0:1-0
0:1-0
rhn-solaris-bootstrap
Red Hat:network_satellite:5.1::el4
From an advisory covering 12 CVEs
before 0:5.1.1-3
0:5.1.1-3
rhn_solaris_bootstrap_5_1_1_3
Red Hat:network_satellite:5.1::el4
From an advisory covering 12 CVEs
before 0:1-0
0:1-0
python
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python
Red Hat:enterprise_linux:5::client
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-tools
Red Hat:enterprise_linux:5::client
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
tkinter
Red Hat:enterprise_linux:5::client
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python
Red Hat:enterprise_linux:5::server
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-tools
Red Hat:enterprise_linux:5::server
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
tkinter
Red Hat:enterprise_linux:5::server
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBPython 2.2 ImageOP Module - Multiple Integer Overflow Vulnerabilities2007-09-17

History

History
RecordedChangedSources
referencesOSV
affected, facts
aliasesEUVD
affected, aliases, exploits, facts, references, titleExploit-DB, GitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-4965 is a medium vulnerability (CVSS 5.8) in Python, published September 18, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 14.0%, the 96th percentile. No source names a fixed version.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 146 references. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open