CVE-2007-4965: Integer Overflow
Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.
Affected Software
Event History
Frequently Asked Questions
What versions of Python are affected by CVE-2007-4965?
CVE-2007-4965 affects Python versions 2.5.1 and earlier, including versions 2.0 through 2.5.
What type of vulnerability is identified in CVE-2007-4965?
CVE-2007-4965 is identified as an integer overflow vulnerability in the imageop module.
What impact does CVE-2007-4965 have on affected systems?
CVE-2007-4965 can lead to denial of service due to application crashes and may expose sensitive memory contents to attackers.
How do I remediate the vulnerability identified in CVE-2007-4965?
To remediate CVE-2007-4965, upgrade to Python version 2.6 or later, which addresses this vulnerability.
Is CVE-2007-4965 related to specific functions in Python?
Yes, CVE-2007-4965 is related to the tovideo method and potentially other unspecified functions in the imageop module.