CVE-2008-1887 in Pythoninfo

Summary

Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

04/18/2008

Disclosure

04/18/2008

Entries

1

CPE

ready

CVSS

10.0

EPSS

0.02752

CTI

None

Sources

Want to stay up to date on a daily basis?

Enable the mail alert feature now!