CVE-2008-3144 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-3144
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-3144

Description: Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations. NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/44171 http://xforce.iss.net/xforce/xfdb/44173 UBUNTU http://www.ubuntu.com/usn/usn-632-1 SUSE http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html SLACKWARE http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289 SAID Secunia Advisory: SA33937 Secunia Advisory: SA31473 Secunia Advisory: SA31687 Secunia Advisory: SA31518 Secunia Advisory: SA31365 Secunia Advisory: SA31332 Secunia Advisory: SA31305 Secunia Advisory: SA32793 Secunia Advisory: SA31358 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:163 http://www.mandriva.com/security/advisories?name=MDVSA-2008:164 GENTOO http://security.gentoo.org/glsa/glsa-200807-16.xml DEBIAN http://www.debian.org/security/2008/dsa-1667 CONFIRM http://svn.python.org/view?rev=63734&view=rev http://svn.python.org/view?rev=63883&view=rev http://wiki.rpath.com/Advisories:rPSA-2008-0243 http://support.apple.com/kb/HT3438 http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900 http://svn.python.org/view?rev=63728&view=rev http://bugs.python.org/issue2588 http://bugs.python.org/issue2589 http://bugs.gentoo.org/show_bug.cgi?id=232137 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/495445/100/0/threaded BID 30491 APPLE http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html

Return to the previous page.