{"id":"CVE-2007-4965","aliases":["AZL-109557","DSA-1551-1","DSA-1620-1","EUVD-2007-4946","GHSA-m9f3-5w45-2j8h","PSF-2007-1","RHSA-2007:1076","RHSA-2008:0264","RHSA-2008:0525","RHSA-2008:0629","RHSA-2009:1176"],"status":"published","title":"Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context...","description":"Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.","severity":{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.13951,"percentile":0.9657,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-190"],"published":"2007-09-18T22:00:00Z","modified":"2026-10-27T05:36:16Z","exploits":[{"source":"exploitdb","id":"EDB-30592","title":"Python 2.2 ImageOP Module - Multiple Integer Overflow Vulnerabilities","type":"dos","platform":"multiple","date":"2007-09-17","verified":true,"url":"https://www.exploit-db.com/exploits/30592"}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.11.0-1"}]}]},{"source":"osv","ecosystem":"Debian:4.0","package":"python2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-3+etch1"}]}],"versions":["2.4.4-3"],"bundled":5},{"source":"osv","ecosystem":"Debian:4.0","package":"python2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5-5+etch1"}]}],"versions":["2.5-5"],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"python-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"python-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"python-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"python-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.4.el4_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.0:el4","package":"rhn-solaris-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.2-3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.0:el4","package":"rhn_solaris_bootstrap_5_0_2_3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:network_satellite:4.2::el3","package":"rhn-solaris-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.2-3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:network_satellite:4.2::el3","package":"rhn_solaris_bootstrap_5_0_2_3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:network_satellite:4.2::el4","package":"rhn-solaris-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.2-3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:network_satellite:4.2::el4","package":"rhn_solaris_bootstrap_5_0_2_3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.1::el4","package":"rhn-solaris-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.1-3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.1::el4","package":"rhn_solaris_bootstrap_5_1_1_3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10}],"products":[{"vendor":"python","product":"python"}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000005.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/25696","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0254","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/4238","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/38675","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-352A.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8496","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/33937","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/28136","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/37471","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/27460","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/28480","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/26837","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2007/3201","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1551","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29303","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8486","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Broken Link"]},{"url":"http://support.apple.com/kb/HT3438","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","Mailing List"]},{"url":"http://secunia.com/advisories/27872","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/29032","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/31492","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00378.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10804","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0629.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065826.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Exploit"]},{"url":"http://www.securityfocus.com/archive/1/488457/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","Mailing List"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-1076.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0637","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36653","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=192876","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://docs.info.apple.com/article.html?artnum=307179","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://secunia.com/advisories/27562","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://www.ubuntu.com/usn/usn-585-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200711-07.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:012","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Broken Link"]},{"url":"http://support.avaya.com/css/P8/documents/100074697","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31255","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/487990/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:013","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Broken Link"]},{"url":"http://www.debian.org/security/2008/dsa-1620","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory"]},{"url":"http://secunia.com/advisories/28838","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory"]},{"url":"https://issues.rpath.com/browse/RPL-1885","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/29889","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-4965","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-m9f3-5w45-2j8h"},{"url":"https://bugs.python.org/issue1179","tags":["report"]},{"url":"http://bugs.python.org/issue8678","tags":["web"]},{"url":"http://seclists.org/fulldisclosure/2007/Sep/279","tags":["web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=541698","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2007:1076","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=235093","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=295971","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=383371","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_1076.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-7228","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-7228","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-7228","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-2052","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-2052","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-2052","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-4965","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-4965","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2008:0264","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=430640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=430641","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=430649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=430651","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=430652","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=430654","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=430655","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=430659","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=430660","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0264.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1849","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1849","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1849","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-2096","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=430650","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-2096","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2096","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-2969","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-2969","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2969","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-1542","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-1542","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-1542","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-2937","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-2937","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-2937","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-2940","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-2940","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-2940","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-3738","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-3738","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-3738","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-4339","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-4339","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-4339","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-4343","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-4343","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-4343","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-4980","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-4980","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-4980","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2008:0525","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0525.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2008:0629","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0629.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:1176","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=442005","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=443810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454990","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=455008","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=455013","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=455018","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=469656","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=470915","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1176.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-1721","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-1721","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-1721","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-1887","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-1887","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-1887","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-2315","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-2315","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-2315","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-3142","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-3142","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3142","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-3143","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-3143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3143","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-3144","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-3144","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3144","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-4864","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4864","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4864","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-5031","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-5031","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-5031","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2007-4965","description":"Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.","status":"published","published":"2007-09-18T22:00:00Z","modified":"2024-08-07T15:17:27.603Z","updated_at":"2026-11-02T13:33:19.093583Z"}],"euvd":[{"id":"EUVD-2007-4946","description":"Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.","status":"published","published":"2007-09-18T22:00:00Z","modified":"2024-08-07T15:17:27Z","updated_at":"2026-11-03T01:16:19.217323Z"}],"ghsa":[{"id":"GHSA-m9f3-5w45-2j8h","title":"Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context...","description":"Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.","status":"published","published":"2022-05-01T18:28:39Z","modified":"2023-08-02T21:31:20Z","cwes":["CWE-190"],"updated_at":"2026-11-02T14:54:43.567376Z"}],"nvd":[{"id":"CVE-2007-4965","description":"Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.","status":"published","published":"2007-09-18T22:17:00Z","modified":"2026-06-16T22:45:10.753Z","cvss":[{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:01:21.141213Z"}],"osv":[{"id":"AZL-109557","title":"CVE-2007-4965 affecting package python-py 1.11.0-1","description":"Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.","status":"published","published":"2007-09-18T22:17:00Z","modified":"2026-10-27T05:36:16Z","updated_at":"2026-11-02T15:28:02.044071Z"},{"id":"DSA-1551-1","title":"python2.4 - several vulnerabilities","status":"published","published":"2008-04-19T00:00:00Z","modified":"2026-03-09T01:22:15.041493Z","updated_at":"2026-11-02T15:46:14.734124Z"},{"id":"DSA-1620-1","title":"python2.5 - several vulnerabilities","status":"published","published":"2008-07-27T00:00:00Z","modified":"2026-03-09T01:22:09.393774Z","updated_at":"2026-11-02T15:46:14.734124Z"},{"id":"PSF-2007-1","title":"rgbimg and imageop overflows","description":"Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.","status":"published","published":"2007-09-18T22:00:00Z","modified":"2025-10-09T00:54:50.793038Z","updated_at":"2026-11-02T15:52:50.263679Z"},{"id":"RHSA-2007:1076","title":"Red Hat Security Advisory: python security update","status":"published","published":"2024-09-15T17:02:54Z","modified":"2026-06-26T10:07:59Z","updated_at":"2026-11-02T15:52:59.70892Z"},{"id":"RHSA-2008:0264","title":"Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update","status":"published","published":"2024-09-15T17:19:20Z","modified":"2026-01-14T11:00:41.880457Z","updated_at":"2026-11-02T15:52:59.70892Z"},{"id":"RHSA-2008:0525","title":"Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update","status":"published","published":"2024-09-15T17:19:23Z","modified":"2026-01-14T11:00:44.754158Z","updated_at":"2026-11-02T15:52:59.70892Z"},{"id":"RHSA-2008:0629","title":"Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update","status":"published","published":"2024-09-15T17:19:28Z","modified":"2026-01-14T11:00:45.350883Z","updated_at":"2026-11-02T15:52:59.70892Z"},{"id":"RHSA-2009:1176","title":"Red Hat Security Advisory: python security update","status":"published","published":"2024-09-15T17:44:38Z","modified":"2026-06-26T12:19:09.393100063Z","updated_at":"2026-11-02T15:53:00.468834Z"}]}}