CVE-2014-7185

2014-10-0817:55:00

CWE-189

[email protected]

web.nvd.nist.gov

103

cve

python

2.7.8

integer overflow

bufferobject.c

nvd

security vulnerability

7.1 High

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

0.019 Low

EPSS

Percentile

88.3%

JSON

Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a “buffer” function.

CPENameOperatorVersion
python:pythonpythoneq2.7.6
python:pythonpythonle2.7.7
python:pythonpythoneq2.7.1150
python:pythonpythoneq2.7.4
python:pythonpythoneq2.7.1
python:pythonpythoneq2.7.3
python:pythonpythoneq2.7.2
python:pythonpythoneq2.7.5
python:pythonpythoneq2.7.2150
apple:mac_os_xapple mac os xle10.10.4

CPE	Name	Operator	Version
python:python	python	eq	2.7.6
python:python	python	le	2.7.7
python:python	python	eq	2.7.1150
python:python	python	eq	2.7.4
python:python	python	eq	2.7.1
python:python	python	eq	2.7.3
python:python	python	eq	2.7.2
python:python	python	eq	2.7.5
python:python	python	eq	2.7.2150
apple:mac_os_x	apple mac os x	le	10.10.4