CVE-2008-1887

Description

Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.

Weakness classification

• CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Primary references

• cve@mitre.org — Exploit, Issue Tracking, Vendor Advisory
• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org — Not Applicable
• cve@mitre.org — Not Applicable
• cve@mitre.org — Not Applicable
• cve@mitre.org — Not Applicable
• cve@mitre.org — Not Applicable
• cve@mitre.org — Not Applicable
• cve@mitre.org — Not Applicable
• cve@mitre.org — Not Applicable
• cve@mitre.org — Third Party Advisory