Approved changes feed: RSS · Atom

cpe:2.3:a:python:python:2.5.0:*:*:*:*:*:*:*

part: a version: 2.5.0 update: *

VendorPython (b57ad93a-6195-5192-9423-6cfad6044a8b)
ProductPython (fc328eef-0a85-5ddb-b629-b8866ec518c8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/python purl2cpe 2026-06-01 10:16:29.242120
pkg:github/python/cpython purl2cpe 2026-06-01 10:16:29.242121
pkg:python/python purl2cpe 2026-06-01 10:16:29.242123
pkg:rpm/opensuse/python purl2cpe 2026-06-01 10:16:29.242124

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-1450 vulnerable 2026-06-03 14:30:14.753916 Details available
Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function.
Published: 2010-05-27T19:00:00.000Z
Updated: 2024-08-07T01:21:19.173Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1449 vulnerable 2026-06-03 14:30:14.753388 Details available
Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12.
Published: 2010-05-27T19:00:00.000Z
Updated: 2024-08-07T01:21:19.041Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4134 vulnerable 2026-06-03 14:29:56.399310 Details available
Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service (application crash) via a large ZSIZE value in a black-and-white (aka B/W) RGB image that triggers an invalid pointer dereference.
Published: 2010-05-27T19:00:00.000Z
Updated: 2024-08-07T06:54:09.795Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2052 vulnerable 2026-06-03 14:28:07.376372 Details available
Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.
Published: 2007-04-16T22:00:00.000Z
Updated: 2024-08-07T13:23:50.498Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.