Secunia Logo  
 
CVE Reference: CVE-2008-3142
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2008-3142

Description:
Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/44173
  http://xforce.iss.net/xforce/xfdb/44170

UBUNTU
  http://www.ubuntu.com/usn/usn-632-1

SUSE
  http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html

SLACKWARE
  http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289

SAID
  Secunia Advisory: SA31358
  Secunia Advisory: SA31305
  Secunia Advisory: SA31332
  Secunia Advisory: SA31365
  Secunia Advisory: SA31518
  Secunia Advisory: SA31687

MANDRIVA
  http://www.mandriva.com/security/advisories?name=MDVSA-2008:163
  http://www.mandriva.com/security/advisories?name=MDVSA-2008:164

GENTOO
  http://security.gentoo.org/glsa/glsa-200807-16.xml

CONFIRM
  http://wiki.rpath.com/Advisories:rPSA-2008-0243
  http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900
  http://bugs.python.org/issue2620
  http://bugs.python.org/file10825/issue2620-gps02-patch.txt
  http://bugs.gentoo.org/show_bug.cgi?id=232137

BUGTRAQ
  http://www.securityfocus.com/archive/1/archive/1/495445/100/0/threaded

BID
  30491


Return to the previous page.