NVD

Id
1825  
Name
CVE-2008-1887  
Description
Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-04-18  
Modified Date
2010-11-30  
Seq
2008-1887  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
11834 1825 CVE-2008-1887 http://bugs.python.org/issue2587  View
11835 1825 CVE-2008-1887 APPLE-SA-2009-02-12  View
11836 1825 CVE-2008-1887 SUSE-SR:2008:017  View
11837 1825 CVE-2008-1887 oval:org.mitre.oval:def:10407  View
11838 1825 CVE-2008-1887 oval:org.mitre.oval:def:8624  View
11839 1825 CVE-2008-1887 GLSA-200807-01  View
11840 1825 CVE-2008-1887 http://support.apple.com/kb/HT3438  View
11841 1825 CVE-2008-1887 http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0122  View
11842 1825 CVE-2008-1887 DSA-1551  View
11843 1825 CVE-2008-1887 DSA-1620  View
11844 1825 CVE-2008-1887 http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900  View
11845 1825 CVE-2008-1887 20080411 IOActive Security Advisory: Incorrect input validation in PyString_FromStringAndSize() leads to multiple buffer overflows  View
11846 1825 CVE-2008-1887 20090824 rPSA-2009-0122-1 idle python  View
11847 1825 CVE-2008-1887 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
11848 1825 CVE-2008-1887 28749  View
11849 1825 CVE-2008-1887 USN-632-1  View
11850 1825 CVE-2008-1887 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
11851 1825 CVE-2008-1887 ADV-2009-3316  View
11852 1825 CVE-2008-1887 python-pystringfromstringandsize-bo(41944)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46983 JVNDB-2008-002293 Python の PyString_FromStringAndSize 関数における任意のコードを実行される脆弱性 Python には、PyString_FromStringAndSize 関数に関する不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2008-1887 32000 CVE-2008-1887 1825 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002293.html 2008-04-18 2009-11-19 View