CVE-2010-1450: Buffer Overflow
First published: Mon May 10 2010(Updated: )
Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/python | <0:2.3.4-14.9.el4 | 0:2.3.4-14.9.el4 |
| redhat/python | <0:2.4.3-43.el5 | 0:2.4.3-43.el5 |
| Python Babel Localedata | =2.5.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=541698
- http://www.securityfocus.com/bid/40365
- http://bugs.python.org/issue8678
- http://support.apple.com/kb/HT4435
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:215
- http://secunia.com/advisories/42888
- http://www.redhat.com/support/errata/RHSA-2011-0027.html
- http://www.vupen.com/english/advisories/2011/0122
- http://www.vupen.com/english/advisories/2011/0212
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
- http://secunia.com/advisories/43068
- http://www.redhat.com/support/errata/RHSA-2011-0260.html
- http://www.vupen.com/english/advisories/2011/0413
- http://secunia.com/advisories/43364
- https://www.cve.org/CVERecord?id=CVE-2010-1450 https://nvd.nist.gov/vuln/detail/CVE-2010-1450
- https://access.redhat.com/errata/RHSA-2011:0260
- https://access.redhat.com/errata/RHSA-2011:0027
- https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1450.json
Frequently Asked Questions
What is the severity of CVE-2010-1450?
CVE-2010-1450 is classified as having a moderate severity due to the potential for remote code execution via crafted image files.
How do I fix CVE-2010-1450?
To fix CVE-2010-1450, upgrade Python to a version after 2.5 that addresses this buffer overflow issue.
Which versions of Python are affected by CVE-2010-1450?
CVE-2010-1450 affects Python versions 2.5.0 and earlier, particularly the rgbimg module.
Can CVE-2010-1450 be exploited remotely?
Yes, CVE-2010-1450 can be exploited by remote attackers through the use of specially crafted image files.
Is there a package associated with CVE-2010-1450?
Yes, CVE-2010-1450 is associated with the Python packages specifically in Red Hat versions for EL4 and EL5.
- agent/type
- agent/first-publish-date
- agent/remedy
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/description
- collector/redhat-cve
- source/Red Hat
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- package-manager/redhat
- vendor/python
- canonical/python babel localedata
- version/python babel localedata/2.5.0