CVE-2008-4864Python Integer Overflow
python: imageop module multiple integer overflows
Published Oct 19, 2008 · Updated Oct 9, 2025 · Also known as PSF-2008-9
Key Facts
Patch immediately- CVE-2008-4864 is a high-severity vulnerability (CVSS 7.5 v2) affecting Python, python-devel (oracle), python-tools (oracle) and 1 more product.
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 21% probability of exploitation in the next 30 days.
- Fixed versions are available, including Python 0:2.2.3-6.11, Python 0:2.3.4-14.7.el4_8.2, Python 0:2.4.3-24.el5_3.6.
- Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.
Scores
CVSS v2
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS (30-day exploit likelihood)
21%
Higher than 97.5% of all scored CVEs
Exploit maturity
Proof of concept
ATLAS score
44/100
Publication score, see How it works
Exploitation Verdict
KEV listed
Not listed
Federal due date
None
No federal due date
Ransomware use
Not reported
Attributed actors
None named
Exploit & Defence Guidance
Exploit maturity
Proof of concept
Public exploit code
2
Proof-of-concept links
In-the-wild evidence
2
Reports of active use
Advisories And Exploit References
- advisoryAPPLE-SA-2009-02-12
- advisoryRHSA-2009:1176
- advisoryRHSA-2009:1177
- advisoryRHSA-2009:1178
- advisorypython-image-module-bo(46606)
- advisoryhttps://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
Description
Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679.
Affected Products
8 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| PythonPython | See advisory | 2.4.6 |
| python-develoracle | See advisory | 2.4.3-24.el5_3.6 |
| python-toolsoracle | See advisory | 2.4.3-24.el5_3.6 |
| tkinteroracle | See advisory | 2.4.3-24.el5_3.6 |
Patched Releases
Python
0:2.2.3-6.11, 0:2.3.4-14.7.el4_8.2, 0:2.4.3-24.el5_3.6, 2.4.3-24.el5_3.6, 2.4.6
python-devel
2.4.3-24.el5_3.6
python-tools
2.4.3-24.el5_3.6
tkinter
2.4.3-24.el5_3.6
Timeline
Publicly disclosed
Oct 19, 2008
Last updated
Oct 9, 2025
Weakness Type
- CWE-190 Integer Overflow or Wraparound
References
- advisoryAPPLE-SA-2009-02-12
- advisoryRHSA-2009:1176
- advisoryRHSA-2009:1177
- advisoryRHSA-2009:1178
- advisorypython-image-module-bo(46606)
FAQ
Common Questions.
Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-200…
Affected: Python; python-devel (oracle); python-tools (oracle), among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including Python 0:2.2.3-6.11, Python 0:2.3.4-14.7.el4_8.2, Python 0:2.4.3-24.el5_3.6.
Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.
Is CVE-2008-4864 On Your Attack Surface?
Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.
Request A Demo