CVE-2008-3142

 

Published at: - 01-08-2008 04:41

Last modified: - 05-07-2022 08:41

Total changes: - 2

Description

Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:P/I:P/A:P

 

Verification logic

 

Reference

• http://bugs.gentoo.org/show_bug.cgi?id=232137
• http://bugs.python.org/file10825/issue2620-gps02-patch.txt
• http://bugs.python.org/issue2620
• GLSA-200807-16-Third Party Advisory
• USN-632-1-Third Party Advisory
• 31365-Not Applicable
• http://wiki.rpath.com/Advisories:rPSA-2008-0243
• 31518-Not Applicable
• 31358-Not Applicable
• 30491-Third Party Advisory, VDB Entry
• MDVSA-2008:164-Broken Link
• MDVSA-2008:163-Broken Link
• SSA:2008-217-01-Third Party Advisory
• 31305-Not Applicable
• 31332-Not Applicable
• SUSE-SR:2008:017-Mailing List, Third Party Advisory
• http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900
• 31687-Not Applicable
• 31473-Not Applicable
• APPLE-SA-2009-02-12-Mailing List, Third Party Advisory
• 33937-Not Applicable
• 32793-Not Applicable
• DSA-1667-Third Party Advisory
• http://support.apple.com/kb/HT3438
• ADV-2009-3316-Permissions Required
• http://www.vmware.com/security/advisories/VMSA-2009-0016.html
• 37471-Not Applicable
• ADV-2008-2288-Permissions Required
• python-multiple-bo(44173)-Third Party Advisory, VDB Entry
• python-unicode-bo(44170)-Third Party Advisory, VDB Entry
• oval:org.mitre.oval:def:8422-Third Party Advisory
• oval:org.mitre.oval:def:11466-Third Party Advisory
• 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components-Third Party Advisory, VDB Entry
• 20080813 rPSA-2008-0243-1 idle python-Third Party Advisory, VDB Entry

 

Keywords

NVD

 

CVE-2008-3142

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures