CVE-2010-1450

Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function.

• CWE-120

• http://bugs.python.org/issue8678Patch, Vendor Advisory
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlThird Party Advisory
• http://secunia.com/advisories/42888Broken Link
• http://secunia.com/advisories/43068Broken Link
• http://secunia.com/advisories/43364Broken Link
• http://support.apple.com/kb/HT4435Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:215Broken Link
• http://www.redhat.com/support/errata/RHSA-2011-0027.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2011-0260.htmlThird Party Advisory
• http://www.securityfocus.com/bid/40365Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2011/0122Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0212Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0413Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=541698Issue Tracking, Patch
• http://bugs.python.org/issue8678Patch, Vendor Advisory
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlThird Party Advisory
• http://secunia.com/advisories/42888Broken Link
• http://secunia.com/advisories/43068Broken Link
• http://secunia.com/advisories/43364Broken Link
• http://support.apple.com/kb/HT4435Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:215Broken Link
• http://www.redhat.com/support/errata/RHSA-2011-0027.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2011-0260.htmlThird Party Advisory
• http://www.securityfocus.com/bid/40365Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2011/0122Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0212Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0413Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=541698Issue Tracking, Patch

Published

May 27, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1444The ZIP archive decompressor in VideoLAN VLC media player be…
• CVE-2010-1445Heap-based buffer overflow in VideoLAN VLC media player befo…
• CVE-2010-1446arch/powerpc/mm/fsl_booke_mmu.c in KGDB in the Linux kernel …
• CVE-2010-1447The Safe (aka Safe.pm) module 2.26, and certain earlier vers…
• CVE-2010-1448Cross-site scripting (XSS) vulnerability in lib/LXR/Common.p…
• CVE-2010-1449Integer overflow in rgbimgmodule.c in the rgbimg module in P…
• CVE-2010-1451The TSB I-TLB load implementation in arch/sparc/kernel/tsb.S…
• CVE-2010-1452The (1) mod_cache and (2) mod_dav modules in the Apache HTTP…
• CVE-2010-1453Cross-site scripting (XSS) vulnerability in the Login form i…
• CVE-2010-1454com.springsource.tcserver.serviceability.rmi.JmxSocketListen…
• CVE-2010-1455The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1…
• CVE-2010-1456Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…