CVE-2008-2315
HIGH severity · CVSS 7.5 · Integer overflow
7.5CVSS HIGH
Summary
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
Impact & exploitability
Attack vectorNetwork
Attack complexityLow
Privileges required—
User interaction—
Confidentiality impact—
Integrity impact—
Availability impact—
Exploit probability (EPSS)4%
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected products we track (1)
Recommendation
Apply the vendor fix promptly. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://bugs.gentoo.org/show_bug.cgi?id=230640Advisory
- http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.htmlAdvisory
- http://secunia.com/advisories/31305
- http://secunia.com/advisories/31332
- http://secunia.com/advisories/31358
- http://secunia.com/advisories/31365
- http://bugs.gentoo.org/attachment.cgi?id=159418&action=viewExploit