Skip to content
Fencer Vulns
medium 5.8

CVE-2007-4965 json

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service…

published 2007-09-18 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-4946

cvss
5.8
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
14.0%
EPSS 14.0% chance of exploitation in 30 days, percentile 96%
public exploits
1
Exploit-DB

Summary

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.

Patch / fix

  • python RHEL 5 2.4.3-24.el5_3.6
  • tkinter RHEL 5 2.4.3-24.el5_3.6
  • python-tools RHEL 5 2.4.3-24.el5_3.6
  • rhn-solaris-bootstrap network satellite 5.1 5.1.1-3
  • rhn_solaris_bootstrap_5_1_1_3 network satellite 5.1 1-0
  • rhn-solaris-bootstrap network satellite 5.0, network satellite 4.2 5.0.2-3
  • rhn_solaris_bootstrap_5_0_2_3 network satellite 5.0, network satellite 4.2 1-0
  • python RHEL 3 2.2.3-6.8

red hat advisories RHSA-2009:1176RHSA-2008:0629RHSA-2008:0525RHSA-2008:0264RHSA-2007:1076

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2007-4965 updated

python imageop module heap corruption

  • Red Hat Desktop version 3 python 2.2.3-6.8, tkinter 2.2.3-6.8, python-tools 2.2.3-6.8
    fixed: vendor fix RHSA-2007:1076
  • Red Hat Enterprise Linux (v. 5 server) python 2.4.3-24.el5_3.6, tkinter 2.4.3-24.el5_3.6, python-tools 2.4.3-24.el5_3.6
    fixed: vendor fix RHSA-2009:1176
  • Red Hat Enterprise Linux AS version 3 python 2.2.3-6.8, tkinter 2.2.3-6.8, python-tools 2.2.3-6.8 Red Hat Enterprise Linux AS version 4 python 2.3.4-14.4.el4_6.1, tkinter 2.3.4-14.4.el4_6.1, python-tools 2.3.4-14.4.el4_6.1
    fixed: vendor fix RHSA-2007:1076
  • Red Hat Enterprise Linux Desktop (v. 5 client) python 2.4.3-24.el5_3.6, tkinter 2.4.3-24.el5_3.6, python-tools 2.4.3-24.el5_3.6
    fixed: vendor fix RHSA-2009:1176
  • Red Hat Enterprise Linux Desktop version 4 python 2.3.4-14.4.el4_6.1, tkinter 2.3.4-14.4.el4_6.1, python-tools 2.3.4-14.4.el4_6.1
    fixed: vendor fix RHSA-2007:1076
  • Red Hat Enterprise Linux Desktop Workstation (v. 5 client) python 2.4.3-24.el5_3.6, tkinter 2.4.3-24.el5_3.6, python-tools 2.4.3-24.el5_3.6
    fixed: vendor fix RHSA-2009:1176
  • Red Hat Enterprise Linux ES version 3 python 2.2.3-6.8, tkinter 2.2.3-6.8, python-tools 2.2.3-6.8 Red Hat Enterprise Linux ES version 4 python 2.3.4-14.4.el4_6.1, tkinter 2.3.4-14.4.el4_6.1, python-tools 2.3.4-14.4.el4_6.1 Red Hat Enterprise Linux WS version 3 python 2.2.3-6.8, tkinter 2.2.3-6.8, python-tools 2.2.3-6.8 Red Hat Enterprise Linux WS version 4 python 2.3.4-14.4.el4_6.1, tkinter 2.3.4-14.4.el4_6.1, python-tools 2.3.4-14.4.el4_6.1
    fixed: vendor fix RHSA-2007:1076
  • Red Hat Satellite 5.0 (RHEL v.4 AS) rhn-solaris-bootstrap 5.0.2-3, rhn_solaris_bootstrap_5_0_2_3 1-0
    fixed: vendor fix RHSA-2008:0264
show 2 more
  • Red Hat Satellite 5.1 (RHEL v.4 AS) rhn-solaris-bootstrap 5.1.1-3, rhn_solaris_bootstrap_5_1_1_3 1-0
    fixed: vendor fix RHSA-2008:0629
  • Red Hat Satellite v 4.2 (RHEL v.3 AS) rhn-solaris-bootstrap 5.0.2-3, rhn_solaris_bootstrap_5_0_2_3 1-0 Red Hat Satellite v 4.2 (RHEL v.4 AS) rhn-solaris-bootstrap 5.0.2-3, rhn_solaris_bootstrap_5_0_2_3 1-0
    fixed: vendor fix RHSA-2008:0525

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Timeline

  1. First public exploit (EDB-30592)
  2. Published

Exploit prediction

13.95% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-30592 Python 2.2 ImageOP Module - Multiple Integer Overflow Vulnerabilities dos, 2007-09-17
  • securityfocus.com http://www.securityfocus.com/bid/25696 referenced PoC, tagged "exploit" by a source, unverified
  • lists.grok.org.uk http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065826.html referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 2.0 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P

Classification

Weakness
  • CWE-190 Integer Overflow or Wraparound

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.