LWN.net Logo

python: multiple vulnerabilities

Package(s):python CVE #(s):CVE-2008-4864 CVE-2008-5031
Created:January 12, 2009 Updated:July 30, 2009
Description:

From the Mandriva advisory:

Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679. (CVE-2008-4864)

Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315. (CVE-2008-5031)

Alerts:
CentOS CESA-2009:1176 2009-07-29
CentOS CESA-2009:1178 2009-07-27
Red Hat RHSA-2009:1176-01 2009-07-27
Red Hat RHSA-2009:1177-01 2009-07-27
Red Hat RHSA-2009:1178-02 2009-07-27
Ubuntu USN-806-1 2009-07-23
Gentoo 200907-16 2009-07-19
Mandriva MDVSA-2009:036 2009-02-12
SuSE SUSE-SR:2009:001 2009-01-12
Mandriva MDVSA-2009:003 2009-01-09

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds