CVE-2008-3142

Description

Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro.

Weakness classification

• CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Primary references

• cve@mitre.org — Issue Tracking, Third Party Advisory
• cve@mitre.org — Exploit, Issue Tracking, Third Party Advisory
• cve@mitre.org — Issue Tracking, Third Party Advisory
• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org — Not Applicable
• cve@mitre.org — Not Applicable
• cve@mitre.org — Not Applicable
• cve@mitre.org — Not Applicable
• cve@mitre.org — Not Applicable
• cve@mitre.org — Not Applicable
• cve@mitre.org — Not Applicable