CVE-2008-1679

Impact:
Low
Public Date:
2008-03-29
CWE:
CWE-190
Bugzilla:
441306: CVE-2008-1679 python: imageop module integer overflows

The MITRE CVE dictionary describes this issue as:

Multiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted images that trigger heap-based buffer overflows. NOTE: this issue is due to an incomplete fix for CVE-2007-4965.

Find out more about CVE-2008-1679 from the MITRE CVE dictionary dictionary and NIST NVD.

Statement

Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2008-1679

The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux 3 (python) RHSA-2009:1178 2009-07-27
Red Hat Enterprise Linux 4 (python) RHSA-2009:1177 2009-07-27

Acknowledgements

Red Hat would like to thank David Remahl of the Apple Product Security team for responsibly reporting these issues.
Last Modified

CVE description copyright © 2017, The MITRE Corporation