NVD

Id
3027  
Name
CVE-2008-3143  
Description
Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to (1) Include/pymem.h; (2) _csv.c, (3) _struct.c, (4) arraymodule.c, (5) audioop.c, (6) binascii.c, (7) cPickle.c, (8) cStringIO.c, (9) cjkcodecs/multibytecodec.c, (10) datetimemodule.c, (11) md5.c, (12) rgbimgmodule.c, and (13) stropmodule.c in Modules/; (14) bufferobject.c, (15) listobject.c, and (16) obmalloc.c in Objects/; (17) Parser/node.c; and (18) asdl.c, (19) ast.c, (20) bltinmodule.c, and (21) compile.c in Python/, as addressed by "checks for integer overflows, contributed by Google."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-08-01  
Modified Date
2011-03-07  
Seq
2008-3143  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
19268 3027 CVE-2008-3143 http://bugs.gentoo.org/show_bug.cgi?id=232137  View
19269 3027 CVE-2008-3143 SUSE-SR:2008:017  View
19270 3027 CVE-2008-3143 oval:org.mitre.oval:def:7720  View
19271 3027 CVE-2008-3143 oval:org.mitre.oval:def:8996  View
19272 3027 CVE-2008-3143 GLSA-200807-16  View
19273 3027 CVE-2008-3143 http://svn.python.org/view?rev=60793&view=rev  View
19274 3027 CVE-2008-3143 http://wiki.rpath.com/Advisories:rPSA-2008-0243  View
19275 3027 CVE-2008-3143 DSA-1667  View
19276 3027 CVE-2008-3143 MDVSA-2008:163  View
19277 3027 CVE-2008-3143 MDVSA-2008:164  View
19278 3027 CVE-2008-3143 http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900  View
19279 3027 CVE-2008-3143 http://www.python.org/download/releases/2.5.2/NEWS.txt  View
19280 3027 CVE-2008-3143 http://www.python.org/download/releases/2.6/NEWS.txt  View
19281 3027 CVE-2008-3143 20080813 rPSA-2008-0243-1 idle python  View
19282 3027 CVE-2008-3143 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
19283 3027 CVE-2008-3143 30491  View
19284 3027 CVE-2008-3143 USN-632-1  View
19285 3027 CVE-2008-3143 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
19286 3027 CVE-2008-3143 ADV-2008-2288  View
19287 3027 CVE-2008-3143 ADV-2009-3316  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47109 JVNDB-2008-002419 Python における複数のモジュールに関する整数オーバーフローの脆弱性 Python には、複数のモジュールにおいて不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2008-3143 33256 CVE-2008-3143 3027 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002419.html 2008-08-01 2009-11-19 View