CVE-2010-1449

Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12.

• CWE-190

• http://bugs.python.org/issue8678Vendor Advisory
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlMailing List
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlThird Party Advisory
• http://secunia.com/advisories/42888Broken Link
• http://secunia.com/advisories/43068Broken Link
• http://secunia.com/advisories/43364Broken Link
• http://support.apple.com/kb/HT4435Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:215Broken Link
• http://www.redhat.com/support/errata/RHSA-2011-0027.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2011-0260.htmlThird Party Advisory
• http://www.securityfocus.com/bid/40363Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2011/0122Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0212Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0413Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=541698Issue Tracking, Patch
• http://bugs.python.org/issue8678Vendor Advisory
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlMailing List
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlThird Party Advisory
• http://secunia.com/advisories/42888Broken Link
• http://secunia.com/advisories/43068Broken Link
• http://secunia.com/advisories/43364Broken Link
• http://support.apple.com/kb/HT4435Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:215Broken Link
• http://www.redhat.com/support/errata/RHSA-2011-0027.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2011-0260.htmlThird Party Advisory
• http://www.securityfocus.com/bid/40363Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2011/0122Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0212Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0413Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=541698Issue Tracking, Patch

Published

May 27, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1443The parse_track_node function in modules/demux/playlist/xspf…
• CVE-2010-1444The ZIP archive decompressor in VideoLAN VLC media player be…
• CVE-2010-1445Heap-based buffer overflow in VideoLAN VLC media player befo…
• CVE-2010-1446arch/powerpc/mm/fsl_booke_mmu.c in KGDB in the Linux kernel …
• CVE-2010-1447The Safe (aka Safe.pm) module 2.26, and certain earlier vers…
• CVE-2010-1448Cross-site scripting (XSS) vulnerability in lib/LXR/Common.p…
• CVE-2010-1450Multiple buffer overflows in the RLE decoder in the rgbimg m…
• CVE-2010-1451The TSB I-TLB load implementation in arch/sparc/kernel/tsb.S…
• CVE-2010-1452The (1) mod_cache and (2) mod_dav modules in the Apache HTTP…
• CVE-2010-1453Cross-site scripting (XSS) vulnerability in the Login form i…
• CVE-2010-1454com.springsource.tcserver.serviceability.rmi.JmxSocketListen…
• CVE-2010-1455The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1…