Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-1450
HistoryMay 27, 2010 - 12:00 a.m.

CVE-2010-1450

2010-05-2700:00:00
ubuntu.com
ubuntu.com
12

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.051 Low

EPSS

Percentile

93.0%

Multiple buffer overflows in the RLE decoder in the rgbimg module in Python
2.5 allow remote attackers to have an unspecified impact via an image file
containing crafted data that triggers improper processing within the (1)
longimagedata or (2) expandrow function.

Notes

Author Note
jdstrand per upstream, python2.6 not affected fix for CVE-2007-4965 also fixed the rgbimg module. This CVE was assigned after the fact.

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.051 Low

EPSS

Percentile

93.0%