6 matches found
Mandriva Linux Security Advisory : python (MDVSA-2008:085)
Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow CVE-2008-1721. A buffer overflow vulnerability was also found in t...
Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : python2.4, python2.5 vulnerabilities (USN-632-1)
It was discovered that there were new integer overflows in the imageop module. If an attacker were able to trick a Python application into processing a specially crafted image, they could execute arbitrary code with user privileges. CVE-2008-1679 Justin Ferguson discovered that the zlib module di...
USN-632-1: Python vulnerabilities
It was discovered that there were new integer overflows in the imageop module. If an attacker were able to trick a Python application into processing a specially crafted image, they could execute arbitrary code with user privileges. CVE-2008-1679 Justin Ferguson discovered that the zlib module di...
Debian DSA-1620-1 : python2.5 - several vulnerabilities
Several vulnerabilities have been discovered in the interpreter for the Python language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-2052 Piotr Engelking discovered that the strxfrm function of the locale module miscalculates the length of an...
Debian DSA-1551-1 : python2.4 - several vulnerabilities
Several vulnerabilities have been discovered in the interpreter for the Python language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-2052 Piotr Engelking discovered that the strxfrm function of the locale module miscalculates the length of an...
Buffer overflow
Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyStringFromStringAndSize function, which allocates less memory than expected when assert is disabled and triggers a buffer overflow...