CVE-2008-4864 Integer overflow in n/a
Integer overflows in Python's imageop module allow attackers to execute arbitrary code via crafted arguments to the crop function.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2008-4864?
CVE-2008-4864 is a high-severity vulnerability in Python Python, published on 31 Oct 2008.
Official description
Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679.
Weakness: CWE-190
Which versions are affected by CVE-2008-4864?
It affects 1 product.
Products include Python Python.
How do I fix CVE-2008-4864?
Upgrade to a fixed version.
Is CVE-2008-4864 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2008-4864 exists.
Public exploit code: 2 Exploit-DB entries.
Other vulnerabilities in Python Python
Sources
Also known as AZL-109581, GHSA-46cx-9569-w574, PSF-2008-9.