Lucene search

K
freebsdFreeBSDFE83EB5B-55E1-11DB-A5AE-00508D6A62DF
HistoryAug 15, 2006 - 12:00 a.m.

python -- buffer overrun in repr() for unicode strings

2006-08-1500:00:00
vuxml.freebsd.org
17

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.3%

Benjamin C. Wiley Sittler reports:

I discovered a [buffer overrun in repr() for unicode
strings]. This causes an unpatched non-debug wide
(UTF-32/UCS-4) build of python to abort.

Ubuntu security team reports:

If an application uses repr() on arbitrary untrusted data,
this [bug] could be exploited to execute arbitrary code
with the privileges of the python application.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchpython+ipv6= 0UNKNOWN
FreeBSDanynoarchpython< 2.4.3_1UNKNOWN

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.3%