Arbitrary Code Execution

2020-04-1000:53:08

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.041 Low

EPSS

Percentile

92.2%

JSON

python is vulnerable to arbitrary code execution. The vulnerability exists if an application written in Python was using the rgbimg module and loaded a specially-crafted SGI image file, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application.

CPENameOperatorVersion
pythoneq2.4.3__24.el5_3.6
pythoneq2.4.3__21.el5
pythoneq2.4.3__27.el5
pythoneq2.4.3__27.el5_5.2
pythoneq2.4.3__27.el5_5.3
pythoneq2.3.4__14.7.el4
pythoneq2.4.3__24.el5
pythoneq2.4.3__19.el5
pythoneq2.3.4__14.4.el4_6.1
pythoneq2.3.4__14.7.el4_8.2

Name	Operator	Version
python	eq	2.4.3__24.el5_3.6
python	eq	2.4.3__21.el5
python	eq	2.4.3__27.el5
python	eq	2.4.3__27.el5_5.2
python	eq	2.4.3__27.el5_5.3
python	eq	2.3.4__14.7.el4
python	eq	2.4.3__24.el5
python	eq	2.4.3__19.el5
python	eq	2.3.4__14.4.el4_6.1
python	eq	2.3.4__14.7.el4_8.2