Arbitrary Code Execution

2020-04-1000:53:08

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.016 Low

EPSS

Percentile

87.6%

JSON

python is vulnerable to arbitrary code execution. The vulnerability exists as multiple flaws were found in the Python rgbimg module. If an application written in Python was using the rgbimg module and loaded a specially-crafted SGI image file, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application.

CPENameOperatorVersion
pythoneq2.4.3__24.el5_3.6
pythoneq2.4.3__21.el5
pythoneq2.4.3__27.el5
pythoneq2.4.3__27.el5_5.2
pythoneq2.4.3__27.el5_5.3
pythoneq2.3.4__14.7.el4
pythoneq2.4.3__24.el5
pythoneq2.4.3__19.el5
pythoneq2.3.4__14.4.el4_6.1
pythoneq2.3.4__14.7.el4_8.2

Name	Operator	Version
python	eq	2.4.3__24.el5_3.6
python	eq	2.4.3__21.el5
python	eq	2.4.3__27.el5
python	eq	2.4.3__27.el5_5.2
python	eq	2.4.3__27.el5_5.3
python	eq	2.3.4__14.7.el4
python	eq	2.4.3__24.el5
python	eq	2.4.3__19.el5
python	eq	2.3.4__14.4.el4_6.1
python	eq	2.3.4__14.7.el4_8.2