NVD

Id
3028  
Name
CVE-2008-3144  
Description
Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations. NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2008-08-01  
Modified Date
2011-03-07  
Seq
2008-3144  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
19288 3028 CVE-2008-3144 http://bugs.gentoo.org/show_bug.cgi?id=232137  View
19289 3028 CVE-2008-3144 http://bugs.python.org/issue2588  View
19290 3028 CVE-2008-3144 http://bugs.python.org/issue2589  View
19291 3028 CVE-2008-3144 APPLE-SA-2009-02-12  View
19292 3028 CVE-2008-3144 SUSE-SR:2008:017  View
19293 3028 CVE-2008-3144 oval:org.mitre.oval:def:10170  View
19294 3028 CVE-2008-3144 oval:org.mitre.oval:def:7725  View
19295 3028 CVE-2008-3144 GLSA-200807-16  View
19296 3028 CVE-2008-3144 SSA:2008-217-01  View
19297 3028 CVE-2008-3144 http://support.apple.com/kb/HT3438  View
19298 3028 CVE-2008-3144 http://svn.python.org/view?rev=63728&view=rev  View
19299 3028 CVE-2008-3144 http://svn.python.org/view?rev=63734&view=rev  View
19300 3028 CVE-2008-3144 http://svn.python.org/view?rev=63883&view=rev  View
19301 3028 CVE-2008-3144 http://wiki.rpath.com/Advisories:rPSA-2008-0243  View
19302 3028 CVE-2008-3144 DSA-1667  View
19303 3028 CVE-2008-3144 MDVSA-2008:163  View
19304 3028 CVE-2008-3144 MDVSA-2008:164  View
19305 3028 CVE-2008-3144 http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900  View
19306 3028 CVE-2008-3144 20080813 rPSA-2008-0243-1 idle python  View
19307 3028 CVE-2008-3144 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
19308 3028 CVE-2008-3144 30491  View
19309 3028 CVE-2008-3144 USN-632-1  View
19310 3028 CVE-2008-3144 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
19311 3028 CVE-2008-3144 ADV-2008-2288  View
19312 3028 CVE-2008-3144 ADV-2009-3316  View
19313 3028 CVE-2008-3144 python-pyosvsnprintf-bo(44171)  View
19314 3028 CVE-2008-3144 python-multiple-bo(44173)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46987 JVNDB-2008-002297 Python の PyOS_vsnprintf 関数における整数オーバーフローの脆弱性 Python の Python/mysnprintf.c 内にある PyOS_vsnprintf 関数には、文字列フォーマット操作への入力処理に不備があることにより、整数オーバーフローの脆弱性が存在します。 CVE-2008-3144 33257 CVE-2008-3144 3028 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002297.html 2008-08-01 2009-10-06 View