PT-2015-7546

Name of the Vulnerable Software and Affected Versions FreeSWITCH versions prior to 1.4.23 FreeSWITCH versions 1.6.x prior to 1.6.2 Description The issue is related to a heap-based buffer overflow in the parse string function, located in libs/esl/src/esl json.c. This allows remote attackers to...

Buffer overflow

The extractFrom function in Internals/QuotedString.cpp in Arduino JSON before 4.5 allows remote attackers to cause a denial of service crash via a JSON string with a \ backslash followed by a terminator, as demonstrated by "\\0", which triggers a buffer overflow and over-read...

Fedora Update for python-cjson FEDORA-2010-10710

Check for the Version of python-cjson OpenVAS Vulnerability Test Fedora Update for python-cjson FEDORA-2010-10710 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for python-cjson FEDORA-2010-10728

Check for the Version of python-cjson OpenVAS Vulnerability Test Fedora Update for python-cjson FEDORA-2010-10728 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for python-cjson FEDORA-2010-10728

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for python-cjson FEDORA-2010-10710

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 12 : python-cjson-1.0.5-5.fc12 (2010-10710)

Sat Jul 3 2010 Felix Schwarz - 1.0.5-5 - CVE-2010-1666 fixed by including a patch from Ubuntu, see Launchpad 585274 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

Fedora 13 : python-cjson-1.0.5-5.fc13 (2010-10728)

Sat Jul 3 2010 Felix Schwarz - 1.0.5-5 - CVE-2010-1666 fixed by including a patch from Ubuntu, see Launchpad 585274 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

[SECURITY] Fedora 13 Update: python-cjson-1.0.5-5.fc13

JSON stands for JavaScript Object Notation and is a text based lightweight data exchange format which is easy for humans to read/write and for machines to parse/generate. JSON is completely language independent and has multiple implementations in most of the programming languages, making it ideal...

[SECURITY] [DSA-2068-1] New python-cjson packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2068-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano July 11, 2010 http://www.debian.org/security/faq -...

Debian DSA-2068-1 : python-cjson - buffer overflow

Matt Giuca discovered a buffer overflow in python-cjson, a fast JSON encoder/decoder for Python. This allows a remote attacker to cause a denial of service application crash through a specially crafted Python script. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

[SECURITY] [DSA-2068-1] New python-cjson packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2068-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano July 11, 2010 http://www.debian.org/security/faq -...

DSA-2068-1 python-cjson - denial of service

Bulletin has no description...

Python-cjson Unicode字符编码缓冲区溢出漏洞

BUGTRAQ ID: 41279 CVE ID: CVE-2010-1666 python-cjson是Python使用的快速JSON编码/解码器模块。 在启用了UCS-4编码的情况下，远程攻击者可以通过向python-cjson模块的cjson.encode函数提交超长的Unicode输入触发缓冲区溢出，导致拒绝服务或完全入侵使用该模块的应用所在系统。 Dan Pascu python-cjson 1.0.5 厂商补丁： Dan Pascu --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Cross site scripting

Dan Pascu python-cjson 1.0.5 does not properly handle a '/' argument to cjson.encode, which makes it easier for remote attackers to conduct certain cross-site scripting XSS attacks involving Firefox and the end tag of a SCRIPT element...

PYSEC-2010-26

Dan Pascu python-cjson 1.0.5 does not properly handle a '/' argument to cjson.encode, which makes it easier for remote attackers to conduct certain cross-site scripting XSS attacks involving Firefox and the end tag of a SCRIPT element...

CVE-2009-4924

Dan Pascu python-cjson 1.0.5 does not properly handle a '/' argument to cjson.encode, which makes it easier for remote attackers to conduct certain cross-site scripting XSS attacks involving Firefox and the end tag of a SCRIPT element...

PYSEC-2010-26

Dan Pascu python-cjson 1.0.5 does not properly handle a '/' argument to cjson.encode, which makes it easier for remote attackers to conduct certain cross-site scripting XSS attacks involving Firefox and the end tag of a SCRIPT element...

UBUNTU-CVE-2009-4924

Dan Pascu python-cjson 1.0.5 does not properly handle a '/' argument to cjson.encode, which makes it easier for remote attackers to conduct certain cross-site scripting XSS attacks involving Firefox and the end tag of a SCRIPT element...

CVE-2009-4924

Dan Pascu python-cjson 1.0.5 does not properly handle a '/' argument to cjson.encode, which makes it easier for remote attackers to conduct certain cross-site scripting XSS attacks involving Firefox and the end tag of a SCRIPT element...