Description
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
Metrics
CVSS 2.0 7.5/10
AV:N/AC:L/Au:N/C:P/I:P/A:PWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://bugs.gentoo.org/attachment.cgi?id=159418&action=viewExploit
- http://bugs.gentoo.org/show_bug.cgi?id=230640Third Party Advisory
- http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.htmlMailing List
- http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.htmlThird Party Advisory
- http://secunia.com/advisories/31305Broken Link
- http://secunia.com/advisories/31332Broken Link
- http://secunia.com/advisories/31358Broken Link
- http://secunia.com/advisories/31365Broken Link
- http://secunia.com/advisories/31518Broken Link
- http://secunia.com/advisories/31687Broken Link
- http://secunia.com/advisories/32793Broken Link
- http://secunia.com/advisories/33937Broken Link
- http://secunia.com/advisories/37471Broken Link
- http://secunia.com/advisories/38675Broken Link
- http://security.gentoo.org/glsa/glsa-200807-16.xmlThird Party Advisory
- http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289Third Party Advisory
- http://support.apple.com/kb/HT3438Third Party Advisory
- http://support.avaya.com/css/P8/documents/100074697Third Party Advisory
- http://www.debian.org/security/2008/dsa-1667Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:163Broken Link, Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:164Broken Link, Third Party Advisory
- http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900Third Party Advisory
- http://www.openwall.com/lists/oss-security/2008/11/05/2Mailing List
- http://www.openwall.com/lists/oss-security/2008/11/05/3Mailing List
- http://www.securityfocus.com/archive/1/507985/100/0/threadedThird Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/30491Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/usn-632-1Third Party Advisory
- http://www.vmware.com/security/advisories/VMSA-2009-0016.htmlThird Party Advisory
- http://www.vupen.com/english/advisories/2008/2288Broken Link, Third Party Advisory
- http://www.vupen.com/english/advisories/2009/3316Broken Link, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44172VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44173VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445Broken Link
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683Broken Link
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761Broken Link
- http://bugs.gentoo.org/attachment.cgi?id=159418&action=viewExploit
- http://bugs.gentoo.org/show_bug.cgi?id=230640Third Party Advisory
- http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.htmlMailing List
- http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.htmlThird Party Advisory
- http://secunia.com/advisories/31305Broken Link
- http://secunia.com/advisories/31332Broken Link
- http://secunia.com/advisories/31358Broken Link
- http://secunia.com/advisories/31365Broken Link
- http://secunia.com/advisories/31518Broken Link
- http://secunia.com/advisories/31687Broken Link
- http://secunia.com/advisories/32793Broken Link
- http://secunia.com/advisories/33937Broken Link
- http://secunia.com/advisories/37471Broken Link
- http://secunia.com/advisories/38675Broken Link
- http://security.gentoo.org/glsa/glsa-200807-16.xmlThird Party Advisory
- http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289Third Party Advisory
- http://support.apple.com/kb/HT3438Third Party Advisory
- http://support.avaya.com/css/P8/documents/100074697Third Party Advisory
- http://www.debian.org/security/2008/dsa-1667Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:163Broken Link, Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:164Broken Link, Third Party Advisory
- http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900Third Party Advisory
- http://www.openwall.com/lists/oss-security/2008/11/05/2Mailing List
- http://www.openwall.com/lists/oss-security/2008/11/05/3Mailing List
- http://www.securityfocus.com/archive/1/507985/100/0/threadedThird Party Advisory, VDB Entry
Timeline
- Published
- Aug 1, 2008
- Last modified
- Jun 16, 2026
- NVD status
- Modified