Логотип exploitDog
product: "python"
Консоль
Логотип exploitDog

exploitDog

product: "python"

Количество 915

Количество 915

redhat логотип

CVE-2010-1450

больше 15 лет назад

Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function.

CVSS2: 5.1
EPSS: Низкий
nvd логотип

CVE-2010-1450

больше 15 лет назад

Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function.

CVSS2: 7.5
EPSS: Низкий
debian логотип

CVE-2010-1450

больше 15 лет назад

Multiple buffer overflows in the RLE decoder in the rgbimg module in P ...

CVSS2: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2010-1449

больше 15 лет назад

Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12.

CVSS2: 7.5
EPSS: Низкий
redhat логотип

CVE-2010-1449

больше 15 лет назад

Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12.

CVSS2: 5.1
EPSS: Низкий
nvd логотип

CVE-2010-1449

больше 15 лет назад

Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12.

CVSS2: 7.5
EPSS: Низкий
debian логотип

CVE-2010-1449

больше 15 лет назад

Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 ...

CVSS2: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2009-4134

больше 15 лет назад

Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service (application crash) via a large ZSIZE value in a black-and-white (aka B/W) RGB image that triggers an invalid pointer dereference.

CVSS2: 5
EPSS: Низкий
redhat логотип

CVE-2009-4134

больше 15 лет назад

Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service (application crash) via a large ZSIZE value in a black-and-white (aka B/W) RGB image that triggers an invalid pointer dereference.

CVSS2: 5.1
EPSS: Низкий
nvd логотип

CVE-2009-4134

больше 15 лет назад

Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service (application crash) via a large ZSIZE value in a black-and-white (aka B/W) RGB image that triggers an invalid pointer dereference.

CVSS2: 5
EPSS: Низкий
debian логотип

CVE-2009-4134

больше 15 лет назад

Buffer underflow in the rgbimg module in Python 2.5 allows remote atta ...

CVSS2: 5
EPSS: Низкий
ubuntu логотип

CVE-2008-5983

около 17 лет назад

Untrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string to sys.path when the argv[0] argument does not contain a path separator, which might allow local users to execute arbitrary code via a Trojan horse Python file in the current working directory.

CVSS2: 6.9
EPSS: Низкий
redhat логотип

CVE-2008-5983

больше 17 лет назад

Untrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string to sys.path when the argv[0] argument does not contain a path separator, which might allow local users to execute arbitrary code via a Trojan horse Python file in the current working directory.

CVSS2: 3.7
EPSS: Низкий
nvd логотип

CVE-2008-5983

около 17 лет назад

Untrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string to sys.path when the argv[0] argument does not contain a path separator, which might allow local users to execute arbitrary code via a Trojan horse Python file in the current working directory.

CVSS2: 6.9
EPSS: Низкий
debian логотип

CVE-2008-5983

около 17 лет назад

Untrusted search path vulnerability in the PySys_SetArgv API function ...

CVSS2: 6.9
EPSS: Низкий
ubuntu логотип

CVE-2008-5031

около 17 лет назад

Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315.

CVSS2: 10
EPSS: Низкий
redhat логотип

CVE-2008-5031

больше 17 лет назад

Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315.

EPSS: Низкий
nvd логотип

CVE-2008-5031

около 17 лет назад

Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315.

CVSS2: 10
EPSS: Низкий
debian логотип

CVE-2008-5031

около 17 лет назад

Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, all ...

CVSS2: 10
EPSS: Низкий
ubuntu логотип

CVE-2008-4864

больше 17 лет назад

Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679.

CVSS2: 7.5
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2010-1450

Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function.

CVSS2: 5.1
3%
Низкий
больше 15 лет назад
nvd логотип
CVE-2010-1450

Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function.

CVSS2: 7.5
3%
Низкий
больше 15 лет назад
debian логотип
CVE-2010-1450

Multiple buffer overflows in the RLE decoder in the rgbimg module in P ...

CVSS2: 7.5
3%
Низкий
больше 15 лет назад
ubuntu логотип
CVE-2010-1449

Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12.

CVSS2: 7.5
4%
Низкий
больше 15 лет назад
redhat логотип
CVE-2010-1449

Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12.

CVSS2: 5.1
4%
Низкий
больше 15 лет назад
nvd логотип
CVE-2010-1449

Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12.

CVSS2: 7.5
4%
Низкий
больше 15 лет назад
debian логотип
CVE-2010-1449

Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 ...

CVSS2: 7.5
4%
Низкий
больше 15 лет назад
ubuntu логотип
CVE-2009-4134

Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service (application crash) via a large ZSIZE value in a black-and-white (aka B/W) RGB image that triggers an invalid pointer dereference.

CVSS2: 5
3%
Низкий
больше 15 лет назад
redhat логотип
CVE-2009-4134

Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service (application crash) via a large ZSIZE value in a black-and-white (aka B/W) RGB image that triggers an invalid pointer dereference.

CVSS2: 5.1
3%
Низкий
больше 15 лет назад
nvd логотип
CVE-2009-4134

Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service (application crash) via a large ZSIZE value in a black-and-white (aka B/W) RGB image that triggers an invalid pointer dereference.

CVSS2: 5
3%
Низкий
больше 15 лет назад
debian логотип
CVE-2009-4134

Buffer underflow in the rgbimg module in Python 2.5 allows remote atta ...

CVSS2: 5
3%
Низкий
больше 15 лет назад
ubuntu логотип
CVE-2008-5983

Untrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string to sys.path when the argv[0] argument does not contain a path separator, which might allow local users to execute arbitrary code via a Trojan horse Python file in the current working directory.

CVSS2: 6.9
0%
Низкий
около 17 лет назад
redhat логотип
CVE-2008-5983

Untrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string to sys.path when the argv[0] argument does not contain a path separator, which might allow local users to execute arbitrary code via a Trojan horse Python file in the current working directory.

CVSS2: 3.7
0%
Низкий
больше 17 лет назад
nvd логотип
CVE-2008-5983

Untrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string to sys.path when the argv[0] argument does not contain a path separator, which might allow local users to execute arbitrary code via a Trojan horse Python file in the current working directory.

CVSS2: 6.9
0%
Низкий
около 17 лет назад
debian логотип
CVE-2008-5983

Untrusted search path vulnerability in the PySys_SetArgv API function ...

CVSS2: 6.9
0%
Низкий
около 17 лет назад
ubuntu логотип
CVE-2008-5031

Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315.

CVSS2: 10
3%
Низкий
около 17 лет назад
redhat логотип
CVE-2008-5031

Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315.

3%
Низкий
больше 17 лет назад
nvd логотип
CVE-2008-5031

Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315.

CVSS2: 10
3%
Низкий
около 17 лет назад
debian логотип
CVE-2008-5031

Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, all ...

CVSS2: 10
3%
Низкий
около 17 лет назад
ubuntu логотип
CVE-2008-4864

Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679.

CVSS2: 7.5
11%
Средний
больше 17 лет назад

Уязвимостей на страницу