CVE-2008-1679
The MITRE CVE dictionary describes this issue as:
Multiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted images that trigger heap-based buffer overflows. NOTE: this issue is due to an incomplete fix for CVE-2007-4965.
Find out more about CVE-2008-1679 from the MITRE CVE dictionary dictionary and NIST NVD.
Statement
Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-1679
The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/
Red Hat Security Errata
| Platform | Errata | Release Date |
|---|---|---|
| Red Hat Enterprise Linux 3 (python) | RHSA-2009:1178 | 2009-07-27 |
| Red Hat Enterprise Linux 4 (python) | RHSA-2009:1177 | 2009-07-27 |
Acknowledgements
Red Hat would like to thank David Remahl of the Apple Product Security team for responsibly reporting these issues.CVE description copyright © 2017, The MITRE Corporation