Python 3.4 / 3.5 xmlparse_setattro() Type Confusion

Title: Python 3.4 and 3.5 xmlparsesetattro Type Confusion Credit: John Leitch [email protected], Bryce Darling [email protected] Url1: http://autosectools.com/Page/Python-xmlparsesetattro-Type-Confusion Url2: http://bugs.python.org/issue25019 Resolution: Fixed Python 3.4 and 3.5 suffer...

Internet Bug Bounty: Python 3.3 - 3.5 product_setstate() Out-of-bounds Read

http://bugs.python.org/issue25021...

CVE-2014-2667

Race condition in the getmaskedmode function in Lib/os.py in Python 3.2 through 3.5, when existok is set to true and multiple threads are used, might allow local users to bypass intended file permissions by leveraging a separate application vulnerability before the umask has been set to the...

CVE-2014-4616

Array index error in the scanstring function in the json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the rawdecode function...