{"id":"CVE-2010-1450","aliases":["EUVD-2010-1478","GHSA-rcg8-wv74-2qwr","PSF-2010-3","RHSA-2011:0027","RHSA-2011:0260"],"status":"published","title":"Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote...","description":"Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.04877,"percentile":0.92121,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-120"],"published":"2010-05-27T19:00:00Z","modified":"2026-06-28T10:04:24Z","affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-43.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-43.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-43.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-43.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-43.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-43.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-43.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-43.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-43.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-43.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-43.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-43.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-43.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-43.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"python-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"python-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"python-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"python-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.9.el4"}]}],"bundled":3}],"products":[{"vendor":"python","product":"python"}],"references":[{"url":"http://secunia.com/advisories/43068","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://support.apple.com/kb/HT4435","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Third Party Advisory"]},{"url":"http://secunia.com/advisories/43364","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2011/0413","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0122","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=541698","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","web","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory"]},{"url":"http://secunia.com/advisories/42888","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://www.securityfocus.com/bid/40365","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0027.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:215","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Broken Link"]},{"url":"http://bugs.python.org/issue8678","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","web"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0260.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1450","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-rcg8-wv74-2qwr"},{"url":"https://bugs.python.org/issue1179","tags":["report"]},{"url":"http://seclists.org/fulldisclosure/2007/Sep/279","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2011:0027","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=482814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=569093","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=590690","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=598197","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=609017","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=609020","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=625372","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=644147","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=644761","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0027.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-5983","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-5983","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-5983","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-4134","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-4134","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-4134","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1449","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1449","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1449","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1450","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1450","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1634","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1634","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1634","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2089","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2089","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2089","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2011:0260","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=497540","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0260.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2010-1450","description":"Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function.","status":"published","published":"2010-05-27T19:00:00Z","modified":"2024-08-07T01:21:19.173Z","updated_at":"2026-11-02T14:33:29.227451Z"}],"euvd":[{"id":"EUVD-2010-1478","description":"Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function.","status":"published","published":"2010-05-27T19:00:00Z","modified":"2024-08-07T01:21:19Z","updated_at":"2026-11-03T01:39:41.294436Z"}],"ghsa":[{"id":"GHSA-rcg8-wv74-2qwr","title":"Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote...","description":"Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function.","status":"published","published":"2022-05-02T06:22:53Z","modified":"2023-02-01T05:00:54Z","cwes":["CWE-120"],"updated_at":"2026-11-02T14:49:37.291211Z"}],"nvd":[{"id":"CVE-2010-1450","description":"Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function.","status":"published","published":"2010-05-27T19:30:01.733Z","modified":"2026-06-16T23:18:24.987Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:01:47.724369Z"}],"osv":[{"id":"PSF-2010-3","title":"rgbimg and imageop overflows","description":"Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function.","status":"published","published":"2010-05-27T19:00:00Z","modified":"2025-10-09T01:05:13.696787Z","updated_at":"2026-11-02T15:52:50.263679Z"},{"id":"RHSA-2011:0027","title":"Red Hat Security Advisory: python security, bug fix, and enhancement update","status":"published","published":"2024-09-15T18:38:36Z","modified":"2026-06-28T10:04:24Z","updated_at":"2026-11-02T15:53:01.003286Z"},{"id":"RHSA-2011:0260","title":"Red Hat Security Advisory: python security and bug fix update","status":"published","published":"2024-09-15T18:38:40Z","modified":"2026-06-26T10:15:22Z","updated_at":"2026-11-02T15:53:01.003286Z"}]}}