CVE-2010-2089
27.05.2010, 19:30
The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent attackers to cause a denial of service (memory corruption and application crash) via crafted arguments, as demonstrated by a call to audioop.reverse with a one-byte string, a different vulnerability than CVE-2010-1634.Enginsight
| Vendor | Product | Version |
|---|---|---|
| python | python | 2.5.0 ≤ 𝑥 < 2.5.6 |
| python | python | 2.6.0 ≤ 𝑥 < 2.6.6 |
| python | python | 3.1.0 ≤ 𝑥 < 3.1.3 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| python2.4 |
| ||||||||||||||||||||
| python2.5 |
| ||||||||||||||||||||
| python2.6 |
| ||||||||||||||||||||
| python2.7 |
| ||||||||||||||||||||
| python3.1 |
| ||||||||||||||||||||
| python3.2 |
|
Common Weakness Enumeration
References