Description

Multiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted images that trigger heap-based buffer overflows. NOTE: this issue is due to an incomplete fix for CVE-2007-4965.

Remediation

References

CVE-2008-1679

Related Vulnerabilities

WordPress Plugin WP-Cumulus 'tagcloud.swf' Cross-Site Scripting (1.22)

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43721)

PHP Integer Overflow or Wraparound Vulnerability (CVE-2016-5096)

WordPress Plugin WP-T-Wap Cross-Site Scripting (1.13.2)

Atlassian Jira Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-20409)

Severity

Medium

Classification

CVE-2008-1679 CWE-190

Tags

Missing Update Known Vulnerabilities