ID:11454 - Exploit for Integer overflow in Python - CVE-2007-4965

 
Main Vulnerability Database Exploits ID:11454 - Exploit for Integer overflow in Python - CVE-2007-4965

ID:11454 - Exploit for Integer overflow in Python - CVE-2007-4965

Published: June 3, 2025


Vulnerability identifier: #VU110167
Vulnerability risk: Medium
CVE-ID: CVE-2007-4965
CWE-ID: CWE-190
Exploitation vector: Remote access
Vulnerable software:
Python

Link to public exploit:


Vulnerability description

The vulnerability allows a remote non-authenticated attacker to read memory contents or crash the application.

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.


Remediation

Install update from vendor's website.