NVD

Id
54222  
Name
CVE-2007-2052  
Description
Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-04-16  
Modified Date
2012-11-05  
Seq
2007-2052  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
274938 54222 CVE-2007-2052 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=416934  View
274939 54222 CVE-2007-2052 [Security-announce] 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates  View
274940 54222 CVE-2007-2052 oval:org.mitre.oval:def:11716  View
274941 54222 CVE-2007-2052 oval:org.mitre.oval:def:8353  View
274942 54222 CVE-2007-2052 DSA-1551  View
274943 54222 CVE-2007-2052 DSA-1620  View
274944 54222 CVE-2007-2052 MDKSA-2007:099  View
274945 54222 CVE-2007-2052 SUSE-SR:2007:013  View
274946 54222 CVE-2007-2052 http://www.python.org/download/releases/2.5.1/NEWS.txt  View
274947 54222 CVE-2007-2052 RHSA-2007:1076  View
274948 54222 CVE-2007-2052 RHSA-2007:1077  View
274949 54222 CVE-2007-2052 RHSA-2008:0629  View
274950 54222 CVE-2007-2052 20070521 FLEA-2007-0019-1: python  View
274951 54222 CVE-2007-2052 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates  View
274952 54222 CVE-2007-2052 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
274953 54222 CVE-2007-2052 23887  View
274954 54222 CVE-2007-2052 2007-0019  View
274955 54222 CVE-2007-2052 USN-585-1  View
274956 54222 CVE-2007-2052 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
274957 54222 CVE-2007-2052 ADV-2007-1465  View
274958 54222 CVE-2007-2052 ADV-2008-0637  View
274959 54222 CVE-2007-2052 ADV-2009-3316  View
274960 54222 CVE-2007-2052 python-localemodule-information-disclosure(34060)  View
274961 54222 CVE-2007-2052 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=235093  View
274962 54222 CVE-2007-2052 https://issues.rpath.com/browse/RPL-1358  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52330 JVNDB-2007-001020 Python の PyLocale_strxfrm() 関数における一つずれエラーの脆弱性 Python には Modules/_localemodule.c の PyLocale_strxfrm() 関数において、一つずれ (off-by-one) エラーのため strxfrm() 関数の使用するバッファサイズを適切に計算しない問題が存在します。 CVE-2007-2052 25407 CVE-2007-2052 54222 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001020.html 2007-04-16 2009-10-06 View