csaf_redhat - rhsa-2009

rhsa-2009_1176

Vulnerability from csaf_redhat

Published

2009-07-27 09:22

Modified

2024-11-22 02:31

Summary

Red Hat Security Advisory: python security update

Notes

Topic

Updated python packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team.

Details

Python is an interpreted, interactive, object-oriented programming language. When the assert() system call was disabled, an input sanitization flaw was revealed in the Python string object implementation that led to a buffer overflow. The missing check for negative size values meant the Python memory allocator could allocate less memory than expected. This could result in arbitrary code execution with the Python interpreter's privileges. (CVE-2008-1887) Multiple buffer and integer overflow flaws were found in the Python Unicode string processing and in the Python Unicode and string object implementations. An attacker could use these flaws to cause a denial of service (Python application crash). (CVE-2008-3142, CVE-2008-5031) Multiple integer overflow flaws were found in the Python imageop module. If a Python application used the imageop module to process untrusted images, it could cause the application to disclose sensitive information, crash or, potentially, execute arbitrary code with the Python interpreter's privileges. (CVE-2007-4965, CVE-2008-4864) Multiple integer underflow and overflow flaws were found in the Python snprintf() wrapper implementation. An attacker could use these flaws to cause a denial of service (memory corruption). (CVE-2008-3144) Multiple integer overflow flaws were found in various Python modules. An attacker could use these flaws to cause a denial of service (Python application crash). (CVE-2008-2315, CVE-2008-3143) An integer signedness error, leading to a buffer overflow, was found in the Python zlib extension module. If a Python application requested the negative byte count be flushed for a decompression stream, it could cause the application to crash or, potentially, execute arbitrary code with the Python interpreter's privileges. (CVE-2008-1721) A flaw was discovered in the strxfrm() function of the Python locale module. Strings generated by this function were not properly NULL-terminated, which could possibly cause disclosure of data stored in the memory of a Python application using this function. (CVE-2007-2052) Red Hat would like to thank David Remahl of the Apple Product Security team for responsibly reporting the CVE-2008-2315 issue. All Python users should upgrade to these updated packages, which contain backported patches to correct these issues.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated python packages that fix multiple security issues are now available\nfor Red Hat Enterprise Linux 5.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Python is an interpreted, interactive, object-oriented programming\nlanguage.\n\nWhen the assert() system call was disabled, an input sanitization flaw was\nrevealed in the Python string object implementation that led to a buffer\noverflow. The missing check for negative size values meant the Python\nmemory allocator could allocate less memory than expected. This could\nresult in arbitrary code execution with the Python interpreter\u0027s\nprivileges. (CVE-2008-1887)\n\nMultiple buffer and integer overflow flaws were found in the Python Unicode\nstring processing and in the Python Unicode and string object\nimplementations. An attacker could use these flaws to cause a denial of\nservice (Python application crash). (CVE-2008-3142, CVE-2008-5031)\n\nMultiple integer overflow flaws were found in the Python imageop module. If\na Python application used the imageop module to process untrusted images,\nit could cause the application to disclose sensitive information, crash or,\npotentially, execute arbitrary code with the Python interpreter\u0027s\nprivileges. (CVE-2007-4965, CVE-2008-4864)\n\nMultiple integer underflow and overflow flaws were found in the Python\nsnprintf() wrapper implementation. An attacker could use these flaws to\ncause a denial of service (memory corruption). (CVE-2008-3144)\n\nMultiple integer overflow flaws were found in various Python modules. An\nattacker could use these flaws to cause a denial of service (Python\napplication crash). (CVE-2008-2315, CVE-2008-3143)\n\nAn integer signedness error, leading to a buffer overflow, was found\nin the Python zlib extension module. If a Python application requested\nthe negative byte count be flushed for a decompression stream, it could\ncause the application to crash or, potentially, execute arbitrary code\nwith the Python interpreter\u0027s privileges. (CVE-2008-1721)\n\nA flaw was discovered in the strxfrm() function of the Python locale\nmodule. Strings generated by this function were not properly\nNULL-terminated, which could possibly cause disclosure of data stored in\nthe memory of a Python application using this function. (CVE-2007-2052)\n\nRed Hat would like to thank David Remahl of the Apple Product Security team\nfor responsibly reporting the CVE-2008-2315 issue.\n\nAll Python users should upgrade to these updated packages, which contain\nbackported patches to correct these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2009:1176",
        "url": "https://access.redhat.com/errata/RHSA-2009:1176"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "235093",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=235093"
      },
      {
        "category": "external",
        "summary": "295971",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=295971"
      },
      {
        "category": "external",
        "summary": "442005",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=442005"
      },
      {
        "category": "external",
        "summary": "443810",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=443810"
      },
      {
        "category": "external",
        "summary": "454990",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=454990"
      },
      {
        "category": "external",
        "summary": "455008",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=455008"
      },
      {
        "category": "external",
        "summary": "455013",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=455013"
      },
      {
        "category": "external",
        "summary": "455018",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=455018"
      },
      {
        "category": "external",
        "summary": "469656",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=469656"
      },
      {
        "category": "external",
        "summary": "470915",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=470915"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1176.json"
      }
    ],
    "title": "Red Hat Security Advisory: python security update",
    "tracking": {
      "current_release_date": "2024-11-22T02:31:38+00:00",
      "generator": {
        "date": "2024-11-22T02:31:38+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2009:1176",
      "initial_release_date": "2009-07-27T09:22:00+00:00",
      "revision_history": [
        {
          "date": "2009-07-27T09:22:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2009-07-27T05:22:50+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T02:31:38+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                  "product_id": "5Client",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
                  "product_id": "5Client-Workstation",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client_workstation"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux (v. 5 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux (v. 5 server)",
                  "product_id": "5Server",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
                "product": {
                  "name": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
                  "product_id": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-debuginfo@2.4.3-24.el5_3.6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-devel-0:2.4.3-24.el5_3.6.x86_64",
                "product": {
                  "name": "python-devel-0:2.4.3-24.el5_3.6.x86_64",
                  "product_id": "python-devel-0:2.4.3-24.el5_3.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-devel@2.4.3-24.el5_3.6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tkinter-0:2.4.3-24.el5_3.6.x86_64",
                "product": {
                  "name": "tkinter-0:2.4.3-24.el5_3.6.x86_64",
                  "product_id": "tkinter-0:2.4.3-24.el5_3.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tkinter@2.4.3-24.el5_3.6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-0:2.4.3-24.el5_3.6.x86_64",
                "product": {
                  "name": "python-0:2.4.3-24.el5_3.6.x86_64",
                  "product_id": "python-0:2.4.3-24.el5_3.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python@2.4.3-24.el5_3.6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-tools-0:2.4.3-24.el5_3.6.x86_64",
                "product": {
                  "name": "python-tools-0:2.4.3-24.el5_3.6.x86_64",
                  "product_id": "python-tools-0:2.4.3-24.el5_3.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-tools@2.4.3-24.el5_3.6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python-debuginfo-0:2.4.3-24.el5_3.6.i386",
                "product": {
                  "name": "python-debuginfo-0:2.4.3-24.el5_3.6.i386",
                  "product_id": "python-debuginfo-0:2.4.3-24.el5_3.6.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-debuginfo@2.4.3-24.el5_3.6?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-devel-0:2.4.3-24.el5_3.6.i386",
                "product": {
                  "name": "python-devel-0:2.4.3-24.el5_3.6.i386",
                  "product_id": "python-devel-0:2.4.3-24.el5_3.6.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-devel@2.4.3-24.el5_3.6?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tkinter-0:2.4.3-24.el5_3.6.i386",
                "product": {
                  "name": "tkinter-0:2.4.3-24.el5_3.6.i386",
                  "product_id": "tkinter-0:2.4.3-24.el5_3.6.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tkinter@2.4.3-24.el5_3.6?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-0:2.4.3-24.el5_3.6.i386",
                "product": {
                  "name": "python-0:2.4.3-24.el5_3.6.i386",
                  "product_id": "python-0:2.4.3-24.el5_3.6.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python@2.4.3-24.el5_3.6?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-tools-0:2.4.3-24.el5_3.6.i386",
                "product": {
                  "name": "python-tools-0:2.4.3-24.el5_3.6.i386",
                  "product_id": "python-tools-0:2.4.3-24.el5_3.6.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-tools@2.4.3-24.el5_3.6?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python-0:2.4.3-24.el5_3.6.src",
                "product": {
                  "name": "python-0:2.4.3-24.el5_3.6.src",
                  "product_id": "python-0:2.4.3-24.el5_3.6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python@2.4.3-24.el5_3.6?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
                "product": {
                  "name": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
                  "product_id": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-debuginfo@2.4.3-24.el5_3.6?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tkinter-0:2.4.3-24.el5_3.6.ia64",
                "product": {
                  "name": "tkinter-0:2.4.3-24.el5_3.6.ia64",
                  "product_id": "tkinter-0:2.4.3-24.el5_3.6.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tkinter@2.4.3-24.el5_3.6?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-0:2.4.3-24.el5_3.6.ia64",
                "product": {
                  "name": "python-0:2.4.3-24.el5_3.6.ia64",
                  "product_id": "python-0:2.4.3-24.el5_3.6.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python@2.4.3-24.el5_3.6?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-devel-0:2.4.3-24.el5_3.6.ia64",
                "product": {
                  "name": "python-devel-0:2.4.3-24.el5_3.6.ia64",
                  "product_id": "python-devel-0:2.4.3-24.el5_3.6.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-devel@2.4.3-24.el5_3.6?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-tools-0:2.4.3-24.el5_3.6.ia64",
                "product": {
                  "name": "python-tools-0:2.4.3-24.el5_3.6.ia64",
                  "product_id": "python-tools-0:2.4.3-24.el5_3.6.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-tools@2.4.3-24.el5_3.6?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
                "product": {
                  "name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
                  "product_id": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-debuginfo@2.4.3-24.el5_3.6?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-devel-0:2.4.3-24.el5_3.6.ppc64",
                "product": {
                  "name": "python-devel-0:2.4.3-24.el5_3.6.ppc64",
                  "product_id": "python-devel-0:2.4.3-24.el5_3.6.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-devel@2.4.3-24.el5_3.6?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
                "product": {
                  "name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
                  "product_id": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-debuginfo@2.4.3-24.el5_3.6?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tkinter-0:2.4.3-24.el5_3.6.ppc",
                "product": {
                  "name": "tkinter-0:2.4.3-24.el5_3.6.ppc",
                  "product_id": "tkinter-0:2.4.3-24.el5_3.6.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tkinter@2.4.3-24.el5_3.6?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-0:2.4.3-24.el5_3.6.ppc",
                "product": {
                  "name": "python-0:2.4.3-24.el5_3.6.ppc",
                  "product_id": "python-0:2.4.3-24.el5_3.6.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python@2.4.3-24.el5_3.6?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-devel-0:2.4.3-24.el5_3.6.ppc",
                "product": {
                  "name": "python-devel-0:2.4.3-24.el5_3.6.ppc",
                  "product_id": "python-devel-0:2.4.3-24.el5_3.6.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-devel@2.4.3-24.el5_3.6?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-tools-0:2.4.3-24.el5_3.6.ppc",
                "product": {
                  "name": "python-tools-0:2.4.3-24.el5_3.6.ppc",
                  "product_id": "python-tools-0:2.4.3-24.el5_3.6.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-tools@2.4.3-24.el5_3.6?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
                "product": {
                  "name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
                  "product_id": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-debuginfo@2.4.3-24.el5_3.6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tkinter-0:2.4.3-24.el5_3.6.s390x",
                "product": {
                  "name": "tkinter-0:2.4.3-24.el5_3.6.s390x",
                  "product_id": "tkinter-0:2.4.3-24.el5_3.6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tkinter@2.4.3-24.el5_3.6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-0:2.4.3-24.el5_3.6.s390x",
                "product": {
                  "name": "python-0:2.4.3-24.el5_3.6.s390x",
                  "product_id": "python-0:2.4.3-24.el5_3.6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python@2.4.3-24.el5_3.6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-devel-0:2.4.3-24.el5_3.6.s390x",
                "product": {
                  "name": "python-devel-0:2.4.3-24.el5_3.6.s390x",
                  "product_id": "python-devel-0:2.4.3-24.el5_3.6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-devel@2.4.3-24.el5_3.6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-tools-0:2.4.3-24.el5_3.6.s390x",
                "product": {
                  "name": "python-tools-0:2.4.3-24.el5_3.6.s390x",
                  "product_id": "python-tools-0:2.4.3-24.el5_3.6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-tools@2.4.3-24.el5_3.6?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390",
                "product": {
                  "name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390",
                  "product_id": "python-debuginfo-0:2.4.3-24.el5_3.6.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-debuginfo@2.4.3-24.el5_3.6?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-devel-0:2.4.3-24.el5_3.6.s390",
                "product": {
                  "name": "python-devel-0:2.4.3-24.el5_3.6.s390",
                  "product_id": "python-devel-0:2.4.3-24.el5_3.6.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-devel@2.4.3-24.el5_3.6?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386"
        },
        "product_reference": "python-0:2.4.3-24.el5_3.6.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64"
        },
        "product_reference": "python-0:2.4.3-24.el5_3.6.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc"
        },
        "product_reference": "python-0:2.4.3-24.el5_3.6.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x"
        },
        "product_reference": "python-0:2.4.3-24.el5_3.6.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-0:2.4.3-24.el5_3.6.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-0:2.4.3-24.el5_3.6.src"
        },
        "product_reference": "python-0:2.4.3-24.el5_3.6.src",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64"
        },
        "product_reference": "python-0:2.4.3-24.el5_3.6.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-debuginfo-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386"
        },
        "product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64"
        },
        "product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc"
        },
        "product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64"
        },
        "product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390"
        },
        "product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.s390",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x"
        },
        "product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64"
        },
        "product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-devel-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386"
        },
        "product_reference": "python-devel-0:2.4.3-24.el5_3.6.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-devel-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64"
        },
        "product_reference": "python-devel-0:2.4.3-24.el5_3.6.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-devel-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc"
        },
        "product_reference": "python-devel-0:2.4.3-24.el5_3.6.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-devel-0:2.4.3-24.el5_3.6.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64"
        },
        "product_reference": "python-devel-0:2.4.3-24.el5_3.6.ppc64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-devel-0:2.4.3-24.el5_3.6.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390"
        },
        "product_reference": "python-devel-0:2.4.3-24.el5_3.6.s390",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-devel-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x"
        },
        "product_reference": "python-devel-0:2.4.3-24.el5_3.6.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-devel-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64"
        },
        "product_reference": "python-devel-0:2.4.3-24.el5_3.6.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-tools-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386"
        },
        "product_reference": "python-tools-0:2.4.3-24.el5_3.6.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-tools-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64"
        },
        "product_reference": "python-tools-0:2.4.3-24.el5_3.6.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-tools-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc"
        },
        "product_reference": "python-tools-0:2.4.3-24.el5_3.6.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-tools-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x"
        },
        "product_reference": "python-tools-0:2.4.3-24.el5_3.6.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-tools-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64"
        },
        "product_reference": "python-tools-0:2.4.3-24.el5_3.6.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tkinter-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386"
        },
        "product_reference": "tkinter-0:2.4.3-24.el5_3.6.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tkinter-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64"
        },
        "product_reference": "tkinter-0:2.4.3-24.el5_3.6.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tkinter-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc"
        },
        "product_reference": "tkinter-0:2.4.3-24.el5_3.6.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tkinter-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x"
        },
        "product_reference": "tkinter-0:2.4.3-24.el5_3.6.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tkinter-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64"
        },
        "product_reference": "tkinter-0:2.4.3-24.el5_3.6.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-0:2.4.3-24.el5_3.6.i386"
        },
        "product_reference": "python-0:2.4.3-24.el5_3.6.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-0:2.4.3-24.el5_3.6.ia64"
        },
        "product_reference": "python-0:2.4.3-24.el5_3.6.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-0:2.4.3-24.el5_3.6.ppc"
        },
        "product_reference": "python-0:2.4.3-24.el5_3.6.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-0:2.4.3-24.el5_3.6.s390x"
        },
        "product_reference": "python-0:2.4.3-24.el5_3.6.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-0:2.4.3-24.el5_3.6.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-0:2.4.3-24.el5_3.6.src"
        },
        "product_reference": "python-0:2.4.3-24.el5_3.6.src",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-0:2.4.3-24.el5_3.6.x86_64"
        },
        "product_reference": "python-0:2.4.3-24.el5_3.6.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-debuginfo-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386"
        },
        "product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64"
        },
        "product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc"
        },
        "product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64"
        },
        "product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390"
        },
        "product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.s390",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x"
        },
        "product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64"
        },
        "product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-devel-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-devel-0:2.4.3-24.el5_3.6.i386"
        },
        "product_reference": "python-devel-0:2.4.3-24.el5_3.6.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-devel-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-devel-0:2.4.3-24.el5_3.6.ia64"
        },
        "product_reference": "python-devel-0:2.4.3-24.el5_3.6.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-devel-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc"
        },
        "product_reference": "python-devel-0:2.4.3-24.el5_3.6.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-devel-0:2.4.3-24.el5_3.6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64"
        },
        "product_reference": "python-devel-0:2.4.3-24.el5_3.6.ppc64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-devel-0:2.4.3-24.el5_3.6.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-devel-0:2.4.3-24.el5_3.6.s390"
        },
        "product_reference": "python-devel-0:2.4.3-24.el5_3.6.s390",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-devel-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-devel-0:2.4.3-24.el5_3.6.s390x"
        },
        "product_reference": "python-devel-0:2.4.3-24.el5_3.6.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-devel-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64"
        },
        "product_reference": "python-devel-0:2.4.3-24.el5_3.6.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-tools-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-tools-0:2.4.3-24.el5_3.6.i386"
        },
        "product_reference": "python-tools-0:2.4.3-24.el5_3.6.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-tools-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-tools-0:2.4.3-24.el5_3.6.ia64"
        },
        "product_reference": "python-tools-0:2.4.3-24.el5_3.6.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-tools-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-tools-0:2.4.3-24.el5_3.6.ppc"
        },
        "product_reference": "python-tools-0:2.4.3-24.el5_3.6.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-tools-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-tools-0:2.4.3-24.el5_3.6.s390x"
        },
        "product_reference": "python-tools-0:2.4.3-24.el5_3.6.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-tools-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64"
        },
        "product_reference": "python-tools-0:2.4.3-24.el5_3.6.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tkinter-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tkinter-0:2.4.3-24.el5_3.6.i386"
        },
        "product_reference": "tkinter-0:2.4.3-24.el5_3.6.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tkinter-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tkinter-0:2.4.3-24.el5_3.6.ia64"
        },
        "product_reference": "tkinter-0:2.4.3-24.el5_3.6.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tkinter-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tkinter-0:2.4.3-24.el5_3.6.ppc"
        },
        "product_reference": "tkinter-0:2.4.3-24.el5_3.6.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tkinter-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tkinter-0:2.4.3-24.el5_3.6.s390x"
        },
        "product_reference": "tkinter-0:2.4.3-24.el5_3.6.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tkinter-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64"
        },
        "product_reference": "tkinter-0:2.4.3-24.el5_3.6.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-0:2.4.3-24.el5_3.6.i386"
        },
        "product_reference": "python-0:2.4.3-24.el5_3.6.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-0:2.4.3-24.el5_3.6.ia64"
        },
        "product_reference": "python-0:2.4.3-24.el5_3.6.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-0:2.4.3-24.el5_3.6.ppc"
        },
        "product_reference": "python-0:2.4.3-24.el5_3.6.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-0:2.4.3-24.el5_3.6.s390x"
        },
        "product_reference": "python-0:2.4.3-24.el5_3.6.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-0:2.4.3-24.el5_3.6.src as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-0:2.4.3-24.el5_3.6.src"
        },
        "product_reference": "python-0:2.4.3-24.el5_3.6.src",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-0:2.4.3-24.el5_3.6.x86_64"
        },
        "product_reference": "python-0:2.4.3-24.el5_3.6.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-debuginfo-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386"
        },
        "product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64"
        },
        "product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc"
        },
        "product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64"
        },
        "product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390"
        },
        "product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.s390",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x"
        },
        "product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64"
        },
        "product_reference": "python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-devel-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-devel-0:2.4.3-24.el5_3.6.i386"
        },
        "product_reference": "python-devel-0:2.4.3-24.el5_3.6.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-devel-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-devel-0:2.4.3-24.el5_3.6.ia64"
        },
        "product_reference": "python-devel-0:2.4.3-24.el5_3.6.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-devel-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc"
        },
        "product_reference": "python-devel-0:2.4.3-24.el5_3.6.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-devel-0:2.4.3-24.el5_3.6.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64"
        },
        "product_reference": "python-devel-0:2.4.3-24.el5_3.6.ppc64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-devel-0:2.4.3-24.el5_3.6.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-devel-0:2.4.3-24.el5_3.6.s390"
        },
        "product_reference": "python-devel-0:2.4.3-24.el5_3.6.s390",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-devel-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-devel-0:2.4.3-24.el5_3.6.s390x"
        },
        "product_reference": "python-devel-0:2.4.3-24.el5_3.6.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-devel-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64"
        },
        "product_reference": "python-devel-0:2.4.3-24.el5_3.6.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-tools-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-tools-0:2.4.3-24.el5_3.6.i386"
        },
        "product_reference": "python-tools-0:2.4.3-24.el5_3.6.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-tools-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-tools-0:2.4.3-24.el5_3.6.ia64"
        },
        "product_reference": "python-tools-0:2.4.3-24.el5_3.6.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-tools-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-tools-0:2.4.3-24.el5_3.6.ppc"
        },
        "product_reference": "python-tools-0:2.4.3-24.el5_3.6.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-tools-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-tools-0:2.4.3-24.el5_3.6.s390x"
        },
        "product_reference": "python-tools-0:2.4.3-24.el5_3.6.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-tools-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64"
        },
        "product_reference": "python-tools-0:2.4.3-24.el5_3.6.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tkinter-0:2.4.3-24.el5_3.6.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tkinter-0:2.4.3-24.el5_3.6.i386"
        },
        "product_reference": "tkinter-0:2.4.3-24.el5_3.6.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tkinter-0:2.4.3-24.el5_3.6.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tkinter-0:2.4.3-24.el5_3.6.ia64"
        },
        "product_reference": "tkinter-0:2.4.3-24.el5_3.6.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tkinter-0:2.4.3-24.el5_3.6.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tkinter-0:2.4.3-24.el5_3.6.ppc"
        },
        "product_reference": "tkinter-0:2.4.3-24.el5_3.6.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tkinter-0:2.4.3-24.el5_3.6.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tkinter-0:2.4.3-24.el5_3.6.s390x"
        },
        "product_reference": "tkinter-0:2.4.3-24.el5_3.6.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tkinter-0:2.4.3-24.el5_3.6.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
        },
        "product_reference": "tkinter-0:2.4.3-24.el5_3.6.x86_64",
        "relates_to_product_reference": "5Server"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2007-2052",
      "cwe": {
        "id": "CWE-193",
        "name": "Off-by-one Error"
      },
      "discovery_date": "2007-04-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "235093"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python off-by-one locale.strxfrm() (possible memory disclosure)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here:\nhttps://access.redhat.com/security/updates/classification/",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-0:2.4.3-24.el5_3.6.src",
          "5Client:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-0:2.4.3-24.el5_3.6.src",
          "5Server:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-2052"
        },
        {
          "category": "external",
          "summary": "RHBZ#235093",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=235093"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-2052",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-2052"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-2052",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-2052"
        }
      ],
      "release_date": "2007-04-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-07-27T09:22:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-0:2.4.3-24.el5_3.6.src",
            "5Client:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-0:2.4.3-24.el5_3.6.src",
            "5Server:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1176"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "python off-by-one locale.strxfrm() (possible memory disclosure)"
    },
    {
      "cve": "CVE-2007-4965",
      "discovery_date": "2007-09-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "295971"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python imageop module heap corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=295971\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: https://access.redhat.com/security/updates/classification/",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-0:2.4.3-24.el5_3.6.src",
          "5Client:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-0:2.4.3-24.el5_3.6.src",
          "5Server:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-4965"
        },
        {
          "category": "external",
          "summary": "RHBZ#295971",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=295971"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-4965",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-4965"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-4965",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-4965"
        }
      ],
      "release_date": "2007-09-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-07-27T09:22:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-0:2.4.3-24.el5_3.6.src",
            "5Client:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-0:2.4.3-24.el5_3.6.src",
            "5Server:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1176"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "python imageop module heap corruption"
    },
    {
      "cve": "CVE-2008-1721",
      "discovery_date": "2008-04-09T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "442005"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python: integer signedness error in the zlib extension module",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=442005\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: https://access.redhat.com/security/updates/classification/",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-0:2.4.3-24.el5_3.6.src",
          "5Client:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-0:2.4.3-24.el5_3.6.src",
          "5Server:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-1721"
        },
        {
          "category": "external",
          "summary": "RHBZ#442005",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=442005"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-1721",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-1721"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-1721",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-1721"
        }
      ],
      "release_date": "2008-04-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-07-27T09:22:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-0:2.4.3-24.el5_3.6.src",
            "5Client:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-0:2.4.3-24.el5_3.6.src",
            "5Server:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1176"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "python: integer signedness error in the zlib extension module"
    },
    {
      "cve": "CVE-2008-1887",
      "discovery_date": "2008-04-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "443810"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python: PyString_FromStringAndSize does not check for negative size values",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-0:2.4.3-24.el5_3.6.src",
          "5Client:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-0:2.4.3-24.el5_3.6.src",
          "5Server:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-1887"
        },
        {
          "category": "external",
          "summary": "RHBZ#443810",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=443810"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-1887",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-1887"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-1887",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-1887"
        }
      ],
      "release_date": "2008-04-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-07-27T09:22:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-0:2.4.3-24.el5_3.6.src",
            "5Client:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-0:2.4.3-24.el5_3.6.src",
            "5Server:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1176"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "python: PyString_FromStringAndSize does not check for negative size values"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "David Remahl"
          ],
          "organization": "Apple Product Security team"
        }
      ],
      "cve": "CVE-2008-2315",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2008-07-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "455008"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules.  NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python: Multiple integer overflows in python core",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-0:2.4.3-24.el5_3.6.src",
          "5Client:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-0:2.4.3-24.el5_3.6.src",
          "5Server:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-2315"
        },
        {
          "category": "external",
          "summary": "RHBZ#455008",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=455008"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-2315",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-2315"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-2315",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-2315"
        }
      ],
      "release_date": "2008-07-31T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-07-27T09:22:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-0:2.4.3-24.el5_3.6.src",
            "5Client:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-0:2.4.3-24.el5_3.6.src",
            "5Server:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1176"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "python: Multiple integer overflows in python core"
    },
    {
      "cve": "CVE-2008-3142",
      "discovery_date": "2008-07-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "454990"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python: Multiple buffer overflows in unicode processing",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-0:2.4.3-24.el5_3.6.src",
          "5Client:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-0:2.4.3-24.el5_3.6.src",
          "5Server:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-3142"
        },
        {
          "category": "external",
          "summary": "RHBZ#454990",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=454990"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-3142",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-3142"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3142",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3142"
        }
      ],
      "release_date": "2008-04-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-07-27T09:22:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-0:2.4.3-24.el5_3.6.src",
            "5Client:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-0:2.4.3-24.el5_3.6.src",
            "5Server:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1176"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "python: Multiple buffer overflows in unicode processing"
    },
    {
      "cve": "CVE-2008-3143",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2008-07-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "455013"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to (1) Include/pymem.h; (2) _csv.c, (3) _struct.c, (4) arraymodule.c, (5) audioop.c, (6) binascii.c, (7) cPickle.c, (8) cStringIO.c, (9) cjkcodecs/multibytecodec.c, (10) datetimemodule.c, (11) md5.c, (12) rgbimgmodule.c, and (13) stropmodule.c in Modules/; (14) bufferobject.c, (15) listobject.c, and (16) obmalloc.c in Objects/; (17) Parser/node.c; and (18) asdl.c, (19) ast.c, (20) bltinmodule.c, and (21) compile.c in Python/, as addressed by \"checks for integer overflows, contributed by Google.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python: Multiple integer overflows discovered by Google",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-0:2.4.3-24.el5_3.6.src",
          "5Client:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-0:2.4.3-24.el5_3.6.src",
          "5Server:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-3143"
        },
        {
          "category": "external",
          "summary": "RHBZ#455013",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=455013"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-3143",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-3143"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3143",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3143"
        }
      ],
      "release_date": "2008-02-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-07-27T09:22:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-0:2.4.3-24.el5_3.6.src",
            "5Client:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-0:2.4.3-24.el5_3.6.src",
            "5Server:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1176"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "python: Multiple integer overflows discovered by Google"
    },
    {
      "cve": "CVE-2008-3144",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2008-07-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "455018"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations.  NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python: Potential integer underflow and overflow in the PyOS_vsnprintf C API function",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-0:2.4.3-24.el5_3.6.src",
          "5Client:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-0:2.4.3-24.el5_3.6.src",
          "5Server:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-3144"
        },
        {
          "category": "external",
          "summary": "RHBZ#455018",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=455018"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-3144",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-3144"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3144",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3144"
        }
      ],
      "release_date": "2008-06-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-07-27T09:22:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-0:2.4.3-24.el5_3.6.src",
            "5Client:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-0:2.4.3-24.el5_3.6.src",
            "5Server:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1176"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "python: Potential integer underflow and overflow in the PyOS_vsnprintf C API function"
    },
    {
      "cve": "CVE-2008-4864",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2008-10-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "469656"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python: imageop module multiple integer overflows",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-0:2.4.3-24.el5_3.6.src",
          "5Client:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-0:2.4.3-24.el5_3.6.src",
          "5Server:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-4864"
        },
        {
          "category": "external",
          "summary": "RHBZ#469656",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=469656"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-4864",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-4864"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-4864",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-4864"
        }
      ],
      "release_date": "2008-10-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-07-27T09:22:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-0:2.4.3-24.el5_3.6.src",
            "5Client:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-0:2.4.3-24.el5_3.6.src",
            "5Server:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1176"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "python: imageop module multiple integer overflows"
    },
    {
      "cve": "CVE-2008-5031",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2008-10-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "470915"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c.  NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python: stringobject, unicodeobject integer overflows",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
          "5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-0:2.4.3-24.el5_3.6.src",
          "5Client:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-0:2.4.3-24.el5_3.6.src",
          "5Server:python-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
          "5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
          "5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5031"
        },
        {
          "category": "external",
          "summary": "RHBZ#470915",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=470915"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5031",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5031"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5031",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5031"
        }
      ],
      "release_date": "2008-10-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-07-27T09:22:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.src",
            "5Client-Workstation:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Client-Workstation:tkinter-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-0:2.4.3-24.el5_3.6.src",
            "5Client:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Client:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Client:tkinter-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-0:2.4.3-24.el5_3.6.src",
            "5Server:python-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.ppc64",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-debuginfo-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.ppc64",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.s390",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-devel-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.i386",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.ia64",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.ppc",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.s390x",
            "5Server:python-tools-0:2.4.3-24.el5_3.6.x86_64",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.i386",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.ia64",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.ppc",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.s390x",
            "5Server:tkinter-0:2.4.3-24.el5_3.6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1176"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "python: stringobject, unicodeobject integer overflows"
    }
  ]
}

cve-2007-2052

Vulnerability from cvelistv5

Published

2007-04-16 22:00

Modified

2024-08-07 13:23

Severity ?

Summary

Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.

References

▼	URL	Tags
	http://lists.vmware.com/pipermail/security-announce/2008/000005.html	mailing-list, x_refsource_MLIST
	http://secunia.com/advisories/28050	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/25190	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/25217	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37471	third-party-advisory, x_refsource_SECUNIA
	http://www.python.org/download/releases/2.5.1/NEWS.txt	x_refsource_CONFIRM
	http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=416934	x_refsource_CONFIRM
	http://www.debian.org/security/2008/dsa-1551	vendor-advisory, x_refsource_DEBIAN
	http://www.vmware.com/security/advisories/VMSA-2009-0016.html	x_refsource_CONFIRM
	http://secunia.com/advisories/29303	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/1465	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/29032	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/31492	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8353	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/archive/1/469294/30/6450/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.redhat.com/support/errata/RHSA-2008-0629.html	vendor-advisory, x_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2007-1077.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/archive/1/488457/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.redhat.com/support/errata/RHSA-2007-1076.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/archive/1/507985/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.vupen.com/english/advisories/2008/0637	vdb-entry, x_refsource_VUPEN
	https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=235093	x_refsource_CONFIRM
	http://secunia.com/advisories/25353	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/25233	third-party-advisory, x_refsource_SECUNIA
	https://issues.rpath.com/browse/RPL-1358	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/usn-585-1	vendor-advisory, x_refsource_UBUNTU
	http://www.trustix.org/errata/2007/0019/	vendor-advisory, x_refsource_TRUSTIX
	http://secunia.com/advisories/28027	third-party-advisory, x_refsource_SECUNIA
	http://www.novell.com/linux/security/advisories/2007_13_sr.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/31255	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2008/dsa-1620	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/25787	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/23887	vdb-entry, x_refsource_BID
	https://exchange.xforce.ibmcloud.com/vulnerabilities/34060	vdb-entry, x_refsource_XF
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11716	vdb-entry, signature, x_refsource_OVAL
	http://www.vupen.com/english/advisories/2009/3316	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDKSA-2007:099	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/29889	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T13:23:50.498Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[Security-announce] 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.vmware.com/pipermail/security-announce/2008/000005.html"
          },
          {
            "name": "28050",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28050"
          },
          {
            "name": "25190",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25190"
          },
          {
            "name": "25217",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25217"
          },
          {
            "name": "37471",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37471"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.python.org/download/releases/2.5.1/NEWS.txt"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=416934"
          },
          {
            "name": "DSA-1551",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1551"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
          },
          {
            "name": "29303",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29303"
          },
          {
            "name": "ADV-2007-1465",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/1465"
          },
          {
            "name": "29032",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29032"
          },
          {
            "name": "31492",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31492"
          },
          {
            "name": "oval:org.mitre.oval:def:8353",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8353"
          },
          {
            "name": "20070521 FLEA-2007-0019-1: python",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/469294/30/6450/threaded"
          },
          {
            "name": "RHSA-2008:0629",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0629.html"
          },
          {
            "name": "RHSA-2007:1077",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-1077.html"
          },
          {
            "name": "20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/488457/100/0/threaded"
          },
          {
            "name": "RHSA-2007:1076",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-1076.html"
          },
          {
            "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
          },
          {
            "name": "ADV-2008-0637",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0637"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=235093"
          },
          {
            "name": "25353",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25353"
          },
          {
            "name": "25233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25233"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1358"
          },
          {
            "name": "USN-585-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-585-1"
          },
          {
            "name": "2007-0019",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2007/0019/"
          },
          {
            "name": "28027",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28027"
          },
          {
            "name": "SUSE-SR:2007:013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_13_sr.html"
          },
          {
            "name": "31255",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31255"
          },
          {
            "name": "DSA-1620",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1620"
          },
          {
            "name": "25787",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25787"
          },
          {
            "name": "23887",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/23887"
          },
          {
            "name": "python-localemodule-information-disclosure(34060)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34060"
          },
          {
            "name": "oval:org.mitre.oval:def:11716",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11716"
          },
          {
            "name": "ADV-2009-3316",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3316"
          },
          {
            "name": "MDKSA-2007:099",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:099"
          },
          {
            "name": "29889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29889"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-03-31T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-16T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[Security-announce] 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.vmware.com/pipermail/security-announce/2008/000005.html"
        },
        {
          "name": "28050",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28050"
        },
        {
          "name": "25190",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25190"
        },
        {
          "name": "25217",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25217"
        },
        {
          "name": "37471",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37471"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.python.org/download/releases/2.5.1/NEWS.txt"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=416934"
        },
        {
          "name": "DSA-1551",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1551"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
        },
        {
          "name": "29303",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29303"
        },
        {
          "name": "ADV-2007-1465",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/1465"
        },
        {
          "name": "29032",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29032"
        },
        {
          "name": "31492",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31492"
        },
        {
          "name": "oval:org.mitre.oval:def:8353",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8353"
        },
        {
          "name": "20070521 FLEA-2007-0019-1: python",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/469294/30/6450/threaded"
        },
        {
          "name": "RHSA-2008:0629",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0629.html"
        },
        {
          "name": "RHSA-2007:1077",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-1077.html"
        },
        {
          "name": "20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/488457/100/0/threaded"
        },
        {
          "name": "RHSA-2007:1076",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-1076.html"
        },
        {
          "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
        },
        {
          "name": "ADV-2008-0637",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0637"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=235093"
        },
        {
          "name": "25353",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25353"
        },
        {
          "name": "25233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25233"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1358"
        },
        {
          "name": "USN-585-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-585-1"
        },
        {
          "name": "2007-0019",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2007/0019/"
        },
        {
          "name": "28027",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28027"
        },
        {
          "name": "SUSE-SR:2007:013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_13_sr.html"
        },
        {
          "name": "31255",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31255"
        },
        {
          "name": "DSA-1620",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1620"
        },
        {
          "name": "25787",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25787"
        },
        {
          "name": "23887",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/23887"
        },
        {
          "name": "python-localemodule-information-disclosure(34060)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34060"
        },
        {
          "name": "oval:org.mitre.oval:def:11716",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11716"
        },
        {
          "name": "ADV-2009-3316",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3316"
        },
        {
          "name": "MDKSA-2007:099",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:099"
        },
        {
          "name": "29889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29889"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-2052",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[Security-announce] 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
              "refsource": "MLIST",
              "url": "http://lists.vmware.com/pipermail/security-announce/2008/000005.html"
            },
            {
              "name": "28050",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28050"
            },
            {
              "name": "25190",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25190"
            },
            {
              "name": "25217",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25217"
            },
            {
              "name": "37471",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37471"
            },
            {
              "name": "http://www.python.org/download/releases/2.5.1/NEWS.txt",
              "refsource": "CONFIRM",
              "url": "http://www.python.org/download/releases/2.5.1/NEWS.txt"
            },
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=416934",
              "refsource": "CONFIRM",
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=416934"
            },
            {
              "name": "DSA-1551",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1551"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
            },
            {
              "name": "29303",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29303"
            },
            {
              "name": "ADV-2007-1465",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/1465"
            },
            {
              "name": "29032",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29032"
            },
            {
              "name": "31492",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31492"
            },
            {
              "name": "oval:org.mitre.oval:def:8353",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8353"
            },
            {
              "name": "20070521 FLEA-2007-0019-1: python",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/469294/30/6450/threaded"
            },
            {
              "name": "RHSA-2008:0629",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0629.html"
            },
            {
              "name": "RHSA-2007:1077",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-1077.html"
            },
            {
              "name": "20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/488457/100/0/threaded"
            },
            {
              "name": "RHSA-2007:1076",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-1076.html"
            },
            {
              "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
            },
            {
              "name": "ADV-2008-0637",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0637"
            },
            {
              "name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=235093",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=235093"
            },
            {
              "name": "25353",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25353"
            },
            {
              "name": "25233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25233"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1358",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1358"
            },
            {
              "name": "USN-585-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-585-1"
            },
            {
              "name": "2007-0019",
              "refsource": "TRUSTIX",
              "url": "http://www.trustix.org/errata/2007/0019/"
            },
            {
              "name": "28027",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28027"
            },
            {
              "name": "SUSE-SR:2007:013",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_13_sr.html"
            },
            {
              "name": "31255",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31255"
            },
            {
              "name": "DSA-1620",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1620"
            },
            {
              "name": "25787",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25787"
            },
            {
              "name": "23887",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/23887"
            },
            {
              "name": "python-localemodule-information-disclosure(34060)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34060"
            },
            {
              "name": "oval:org.mitre.oval:def:11716",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11716"
            },
            {
              "name": "ADV-2009-3316",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3316"
            },
            {
              "name": "MDKSA-2007:099",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:099"
            },
            {
              "name": "29889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29889"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-2052",
    "datePublished": "2007-04-16T22:00:00",
    "dateReserved": "2007-04-16T00:00:00",
    "dateUpdated": "2024-08-07T13:23:50.498Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-3143

Vulnerability from cvelistv5

Published

2008-08-01 14:00

Modified

2024-08-07 09:28

Severity ?

Summary

Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to (1) Include/pymem.h; (2) _csv.c, (3) _struct.c, (4) arraymodule.c, (5) audioop.c, (6) binascii.c, (7) cPickle.c, (8) cStringIO.c, (9) cjkcodecs/multibytecodec.c, (10) datetimemodule.c, (11) md5.c, (12) rgbimgmodule.c, and (13) stropmodule.c in Modules/; (14) bufferobject.c, (15) listobject.c, and (16) obmalloc.c in Objects/; (17) Parser/node.c; and (18) asdl.c, (19) ast.c, (20) bltinmodule.c, and (21) compile.c in Python/, as addressed by "checks for integer overflows, contributed by Google."

References

▼	URL	Tags
	http://www.securityfocus.com/archive/1/495445/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.vupen.com/english/advisories/2008/2288	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/32793	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/30491	vdb-entry, x_refsource_BID
	http://svn.python.org/view?rev=60793&view=rev	x_refsource_CONFIRM
	http://secunia.com/advisories/37471	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/31687	third-party-advisory, x_refsource_SECUNIA
	http://www.python.org/download/releases/2.5.2/NEWS.txt	x_refsource_CONFIRM
	http://www.vmware.com/security/advisories/VMSA-2009-0016.html	x_refsource_CONFIRM
	http://security.gentoo.org/glsa/glsa-200807-16.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/31332	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-632-1	vendor-advisory, x_refsource_UBUNTU
	http://bugs.gentoo.org/show_bug.cgi?id=232137	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:164	vendor-advisory, x_refsource_MANDRIVA
	http://www.securityfocus.com/archive/1/507985/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/31518	third-party-advisory, x_refsource_SECUNIA
	http://www.python.org/download/releases/2.6/NEWS.txt	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7720	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8996	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/31365	third-party-advisory, x_refsource_SECUNIA
	http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900	x_refsource_CONFIRM
	http://secunia.com/advisories/31473	third-party-advisory, x_refsource_SECUNIA
	http://wiki.rpath.com/Advisories:rPSA-2008-0243	x_refsource_CONFIRM
	http://www.debian.org/security/2008/dsa-1667	vendor-advisory, x_refsource_DEBIAN
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:163	vendor-advisory, x_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2009/3316	vdb-entry, x_refsource_VUPEN

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T09:28:41.729Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20080813 rPSA-2008-0243-1 idle python",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/495445/100/0/threaded"
          },
          {
            "name": "SUSE-SR:2008:017",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html"
          },
          {
            "name": "ADV-2008-2288",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2288"
          },
          {
            "name": "32793",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32793"
          },
          {
            "name": "30491",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/30491"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.python.org/view?rev=60793\u0026view=rev"
          },
          {
            "name": "37471",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37471"
          },
          {
            "name": "31687",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31687"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.python.org/download/releases/2.5.2/NEWS.txt"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
          },
          {
            "name": "GLSA-200807-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200807-16.xml"
          },
          {
            "name": "31332",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31332"
          },
          {
            "name": "USN-632-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-632-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=232137"
          },
          {
            "name": "MDVSA-2008:164",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:164"
          },
          {
            "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
          },
          {
            "name": "31518",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31518"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.python.org/download/releases/2.6/NEWS.txt"
          },
          {
            "name": "oval:org.mitre.oval:def:7720",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7720"
          },
          {
            "name": "oval:org.mitre.oval:def:8996",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8996"
          },
          {
            "name": "31365",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31365"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900"
          },
          {
            "name": "31473",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31473"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0243"
          },
          {
            "name": "DSA-1667",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1667"
          },
          {
            "name": "MDVSA-2008:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:163"
          },
          {
            "name": "ADV-2009-3316",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3316"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-07-31T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to (1) Include/pymem.h; (2) _csv.c, (3) _struct.c, (4) arraymodule.c, (5) audioop.c, (6) binascii.c, (7) cPickle.c, (8) cStringIO.c, (9) cjkcodecs/multibytecodec.c, (10) datetimemodule.c, (11) md5.c, (12) rgbimgmodule.c, and (13) stropmodule.c in Modules/; (14) bufferobject.c, (15) listobject.c, and (16) obmalloc.c in Objects/; (17) Parser/node.c; and (18) asdl.c, (19) ast.c, (20) bltinmodule.c, and (21) compile.c in Python/, as addressed by \"checks for integer overflows, contributed by Google.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20080813 rPSA-2008-0243-1 idle python",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/495445/100/0/threaded"
        },
        {
          "name": "SUSE-SR:2008:017",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html"
        },
        {
          "name": "ADV-2008-2288",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2288"
        },
        {
          "name": "32793",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32793"
        },
        {
          "name": "30491",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/30491"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.python.org/view?rev=60793\u0026view=rev"
        },
        {
          "name": "37471",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37471"
        },
        {
          "name": "31687",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31687"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.python.org/download/releases/2.5.2/NEWS.txt"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
        },
        {
          "name": "GLSA-200807-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200807-16.xml"
        },
        {
          "name": "31332",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31332"
        },
        {
          "name": "USN-632-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-632-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.gentoo.org/show_bug.cgi?id=232137"
        },
        {
          "name": "MDVSA-2008:164",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:164"
        },
        {
          "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
        },
        {
          "name": "31518",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31518"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.python.org/download/releases/2.6/NEWS.txt"
        },
        {
          "name": "oval:org.mitre.oval:def:7720",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7720"
        },
        {
          "name": "oval:org.mitre.oval:def:8996",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8996"
        },
        {
          "name": "31365",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31365"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900"
        },
        {
          "name": "31473",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31473"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0243"
        },
        {
          "name": "DSA-1667",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1667"
        },
        {
          "name": "MDVSA-2008:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:163"
        },
        {
          "name": "ADV-2009-3316",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3316"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-3143",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to (1) Include/pymem.h; (2) _csv.c, (3) _struct.c, (4) arraymodule.c, (5) audioop.c, (6) binascii.c, (7) cPickle.c, (8) cStringIO.c, (9) cjkcodecs/multibytecodec.c, (10) datetimemodule.c, (11) md5.c, (12) rgbimgmodule.c, and (13) stropmodule.c in Modules/; (14) bufferobject.c, (15) listobject.c, and (16) obmalloc.c in Objects/; (17) Parser/node.c; and (18) asdl.c, (19) ast.c, (20) bltinmodule.c, and (21) compile.c in Python/, as addressed by \"checks for integer overflows, contributed by Google.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20080813 rPSA-2008-0243-1 idle python",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/495445/100/0/threaded"
            },
            {
              "name": "SUSE-SR:2008:017",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html"
            },
            {
              "name": "ADV-2008-2288",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/2288"
            },
            {
              "name": "32793",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32793"
            },
            {
              "name": "30491",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/30491"
            },
            {
              "name": "http://svn.python.org/view?rev=60793\u0026view=rev",
              "refsource": "CONFIRM",
              "url": "http://svn.python.org/view?rev=60793\u0026view=rev"
            },
            {
              "name": "37471",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37471"
            },
            {
              "name": "31687",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31687"
            },
            {
              "name": "http://www.python.org/download/releases/2.5.2/NEWS.txt",
              "refsource": "CONFIRM",
              "url": "http://www.python.org/download/releases/2.5.2/NEWS.txt"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
            },
            {
              "name": "GLSA-200807-16",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200807-16.xml"
            },
            {
              "name": "31332",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31332"
            },
            {
              "name": "USN-632-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-632-1"
            },
            {
              "name": "http://bugs.gentoo.org/show_bug.cgi?id=232137",
              "refsource": "CONFIRM",
              "url": "http://bugs.gentoo.org/show_bug.cgi?id=232137"
            },
            {
              "name": "MDVSA-2008:164",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:164"
            },
            {
              "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
            },
            {
              "name": "31518",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31518"
            },
            {
              "name": "http://www.python.org/download/releases/2.6/NEWS.txt",
              "refsource": "CONFIRM",
              "url": "http://www.python.org/download/releases/2.6/NEWS.txt"
            },
            {
              "name": "oval:org.mitre.oval:def:7720",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7720"
            },
            {
              "name": "oval:org.mitre.oval:def:8996",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8996"
            },
            {
              "name": "31365",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31365"
            },
            {
              "name": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900",
              "refsource": "CONFIRM",
              "url": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900"
            },
            {
              "name": "31473",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31473"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0243",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0243"
            },
            {
              "name": "DSA-1667",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1667"
            },
            {
              "name": "MDVSA-2008:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:163"
            },
            {
              "name": "ADV-2009-3316",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3316"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-3143",
    "datePublished": "2008-08-01T14:00:00",
    "dateReserved": "2008-07-10T00:00:00",
    "dateUpdated": "2024-08-07T09:28:41.729Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-3142

Vulnerability from cvelistv5

Published

2008-08-01 14:00

Modified

2024-08-07 09:28

Severity ?

Summary

Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro.

References

▼	URL	Tags
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8422	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/archive/1/495445/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.vupen.com/english/advisories/2008/2288	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/32793	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/44173	vdb-entry, x_refsource_XF
	http://www.securityfocus.com/bid/30491	vdb-entry, x_refsource_BID
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11466	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/33937	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37471	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/31687	third-party-advisory, x_refsource_SECUNIA
	http://www.vmware.com/security/advisories/VMSA-2009-0016.html	x_refsource_CONFIRM
	http://security.gentoo.org/glsa/glsa-200807-16.xml	vendor-advisory, x_refsource_GENTOO
	http://support.apple.com/kb/HT3438	x_refsource_CONFIRM
	https://exchange.xforce.ibmcloud.com/vulnerabilities/44170	vdb-entry, x_refsource_XF
	http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://secunia.com/advisories/31358	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/31332	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-632-1	vendor-advisory, x_refsource_UBUNTU
	http://bugs.gentoo.org/show_bug.cgi?id=232137	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:164	vendor-advisory, x_refsource_MANDRIVA
	http://bugs.python.org/file10825/issue2620-gps02-patch.txt	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/507985/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/31518	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/31305	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/31365	third-party-advisory, x_refsource_SECUNIA
	http://bugs.python.org/issue2620	x_refsource_CONFIRM
	http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900	x_refsource_CONFIRM
	http://secunia.com/advisories/31473	third-party-advisory, x_refsource_SECUNIA
	http://wiki.rpath.com/Advisories:rPSA-2008-0243	x_refsource_CONFIRM
	http://www.debian.org/security/2008/dsa-1667	vendor-advisory, x_refsource_DEBIAN
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:163	vendor-advisory, x_refsource_MANDRIVA
	http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289	vendor-advisory, x_refsource_SLACKWARE
	http://www.vupen.com/english/advisories/2009/3316	vdb-entry, x_refsource_VUPEN

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T09:28:41.489Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:8422",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8422"
          },
          {
            "name": "20080813 rPSA-2008-0243-1 idle python",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/495445/100/0/threaded"
          },
          {
            "name": "SUSE-SR:2008:017",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html"
          },
          {
            "name": "ADV-2008-2288",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2288"
          },
          {
            "name": "32793",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32793"
          },
          {
            "name": "python-multiple-bo(44173)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44173"
          },
          {
            "name": "30491",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/30491"
          },
          {
            "name": "oval:org.mitre.oval:def:11466",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11466"
          },
          {
            "name": "33937",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33937"
          },
          {
            "name": "37471",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37471"
          },
          {
            "name": "31687",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31687"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
          },
          {
            "name": "GLSA-200807-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200807-16.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3438"
          },
          {
            "name": "python-unicode-bo(44170)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44170"
          },
          {
            "name": "APPLE-SA-2009-02-12",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
          },
          {
            "name": "31358",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31358"
          },
          {
            "name": "31332",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31332"
          },
          {
            "name": "USN-632-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-632-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=232137"
          },
          {
            "name": "MDVSA-2008:164",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:164"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.python.org/file10825/issue2620-gps02-patch.txt"
          },
          {
            "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
          },
          {
            "name": "31518",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31518"
          },
          {
            "name": "31305",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31305"
          },
          {
            "name": "31365",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31365"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.python.org/issue2620"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900"
          },
          {
            "name": "31473",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31473"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0243"
          },
          {
            "name": "DSA-1667",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1667"
          },
          {
            "name": "MDVSA-2008:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:163"
          },
          {
            "name": "SSA:2008-217-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289"
          },
          {
            "name": "ADV-2009-3316",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3316"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-07-31T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:8422",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8422"
        },
        {
          "name": "20080813 rPSA-2008-0243-1 idle python",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/495445/100/0/threaded"
        },
        {
          "name": "SUSE-SR:2008:017",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html"
        },
        {
          "name": "ADV-2008-2288",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2288"
        },
        {
          "name": "32793",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32793"
        },
        {
          "name": "python-multiple-bo(44173)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44173"
        },
        {
          "name": "30491",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/30491"
        },
        {
          "name": "oval:org.mitre.oval:def:11466",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11466"
        },
        {
          "name": "33937",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33937"
        },
        {
          "name": "37471",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37471"
        },
        {
          "name": "31687",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31687"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
        },
        {
          "name": "GLSA-200807-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200807-16.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3438"
        },
        {
          "name": "python-unicode-bo(44170)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44170"
        },
        {
          "name": "APPLE-SA-2009-02-12",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
        },
        {
          "name": "31358",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31358"
        },
        {
          "name": "31332",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31332"
        },
        {
          "name": "USN-632-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-632-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.gentoo.org/show_bug.cgi?id=232137"
        },
        {
          "name": "MDVSA-2008:164",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:164"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.python.org/file10825/issue2620-gps02-patch.txt"
        },
        {
          "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
        },
        {
          "name": "31518",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31518"
        },
        {
          "name": "31305",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31305"
        },
        {
          "name": "31365",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31365"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.python.org/issue2620"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900"
        },
        {
          "name": "31473",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31473"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0243"
        },
        {
          "name": "DSA-1667",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1667"
        },
        {
          "name": "MDVSA-2008:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:163"
        },
        {
          "name": "SSA:2008-217-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289"
        },
        {
          "name": "ADV-2009-3316",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3316"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-3142",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:8422",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8422"
            },
            {
              "name": "20080813 rPSA-2008-0243-1 idle python",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/495445/100/0/threaded"
            },
            {
              "name": "SUSE-SR:2008:017",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html"
            },
            {
              "name": "ADV-2008-2288",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/2288"
            },
            {
              "name": "32793",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32793"
            },
            {
              "name": "python-multiple-bo(44173)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44173"
            },
            {
              "name": "30491",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/30491"
            },
            {
              "name": "oval:org.mitre.oval:def:11466",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11466"
            },
            {
              "name": "33937",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33937"
            },
            {
              "name": "37471",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37471"
            },
            {
              "name": "31687",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31687"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
            },
            {
              "name": "GLSA-200807-16",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200807-16.xml"
            },
            {
              "name": "http://support.apple.com/kb/HT3438",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3438"
            },
            {
              "name": "python-unicode-bo(44170)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44170"
            },
            {
              "name": "APPLE-SA-2009-02-12",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
            },
            {
              "name": "31358",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31358"
            },
            {
              "name": "31332",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31332"
            },
            {
              "name": "USN-632-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-632-1"
            },
            {
              "name": "http://bugs.gentoo.org/show_bug.cgi?id=232137",
              "refsource": "CONFIRM",
              "url": "http://bugs.gentoo.org/show_bug.cgi?id=232137"
            },
            {
              "name": "MDVSA-2008:164",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:164"
            },
            {
              "name": "http://bugs.python.org/file10825/issue2620-gps02-patch.txt",
              "refsource": "CONFIRM",
              "url": "http://bugs.python.org/file10825/issue2620-gps02-patch.txt"
            },
            {
              "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
            },
            {
              "name": "31518",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31518"
            },
            {
              "name": "31305",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31305"
            },
            {
              "name": "31365",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31365"
            },
            {
              "name": "http://bugs.python.org/issue2620",
              "refsource": "CONFIRM",
              "url": "http://bugs.python.org/issue2620"
            },
            {
              "name": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900",
              "refsource": "CONFIRM",
              "url": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900"
            },
            {
              "name": "31473",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31473"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0243",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0243"
            },
            {
              "name": "DSA-1667",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1667"
            },
            {
              "name": "MDVSA-2008:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:163"
            },
            {
              "name": "SSA:2008-217-01",
              "refsource": "SLACKWARE",
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289"
            },
            {
              "name": "ADV-2009-3316",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3316"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-3142",
    "datePublished": "2008-08-01T14:00:00",
    "dateReserved": "2008-07-10T00:00:00",
    "dateUpdated": "2024-08-07T09:28:41.489Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-1721

Vulnerability from cvelistv5

Published

2008-04-10 19:00

Modified

2024-08-07 08:32

Severity ?

Summary

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.

References

▼	URL	Tags
	http://security.gentoo.org/glsa/glsa-200807-01.xml	vendor-advisory, x_refsource_GENTOO
	http://www.vupen.com/english/advisories/2008/1229/references	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/30872	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/28715	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/38675	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/33937	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:085	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/37471	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29955	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2008/dsa-1551	vendor-advisory, x_refsource_DEBIAN
	http://www.vmware.com/security/advisories/VMSA-2009-0016.html	x_refsource_CONFIRM
	http://support.apple.com/kb/HT3438	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://secunia.com/advisories/31358	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/41748	vdb-entry, x_refsource_XF
	http://www.ubuntu.com/usn/usn-632-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id?1019823	vdb-entry, x_refsource_SECTRACK
	http://bugs.python.org/issue2586	x_refsource_CONFIRM
	https://issues.rpath.com/browse/RPL-2444	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/507985/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://securityreason.com/securityalert/3802	third-party-advisory, x_refsource_SREASON
	http://secunia.com/advisories/31365	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8249	vdb-entry, signature, x_refsource_OVAL
	http://support.avaya.com/css/P8/documents/100074697	x_refsource_CONFIRM
	http://secunia.com/advisories/31255	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/490690/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.debian.org/security/2008/dsa-1620	vendor-advisory, x_refsource_DEBIAN
	http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0149	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9407	vdb-entry, signature, x_refsource_OVAL
	http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289	vendor-advisory, x_refsource_SLACKWARE
	http://www.vupen.com/english/advisories/2009/3316	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/29889	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8494	vdb-entry, signature, x_refsource_OVAL

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T08:32:01.129Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-200807-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200807-01.xml"
          },
          {
            "name": "ADV-2008-1229",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1229/references"
          },
          {
            "name": "30872",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30872"
          },
          {
            "name": "28715",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/28715"
          },
          {
            "name": "38675",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38675"
          },
          {
            "name": "33937",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33937"
          },
          {
            "name": "MDVSA-2008:085",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:085"
          },
          {
            "name": "37471",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37471"
          },
          {
            "name": "29955",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29955"
          },
          {
            "name": "DSA-1551",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1551"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3438"
          },
          {
            "name": "APPLE-SA-2009-02-12",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
          },
          {
            "name": "31358",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31358"
          },
          {
            "name": "zlib-pystringfromstringandsize-bo(41748)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41748"
          },
          {
            "name": "USN-632-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-632-1"
          },
          {
            "name": "1019823",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1019823"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.python.org/issue2586"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-2444"
          },
          {
            "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
          },
          {
            "name": "3802",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/3802"
          },
          {
            "name": "31365",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31365"
          },
          {
            "name": "oval:org.mitre.oval:def:8249",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8249"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/css/P8/documents/100074697"
          },
          {
            "name": "31255",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31255"
          },
          {
            "name": "20080409 IOActive Security Advisory: Buffer overflow in Python zlib extension module",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/490690/100/0/threaded"
          },
          {
            "name": "DSA-1620",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1620"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0149"
          },
          {
            "name": "oval:org.mitre.oval:def:9407",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9407"
          },
          {
            "name": "SSA:2008-217-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289"
          },
          {
            "name": "ADV-2009-3316",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3316"
          },
          {
            "name": "29889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29889"
          },
          {
            "name": "oval:org.mitre.oval:def:8494",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8494"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-04-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "GLSA-200807-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200807-01.xml"
        },
        {
          "name": "ADV-2008-1229",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/1229/references"
        },
        {
          "name": "30872",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30872"
        },
        {
          "name": "28715",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/28715"
        },
        {
          "name": "38675",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38675"
        },
        {
          "name": "33937",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33937"
        },
        {
          "name": "MDVSA-2008:085",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:085"
        },
        {
          "name": "37471",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37471"
        },
        {
          "name": "29955",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29955"
        },
        {
          "name": "DSA-1551",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1551"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3438"
        },
        {
          "name": "APPLE-SA-2009-02-12",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
        },
        {
          "name": "31358",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31358"
        },
        {
          "name": "zlib-pystringfromstringandsize-bo(41748)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41748"
        },
        {
          "name": "USN-632-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-632-1"
        },
        {
          "name": "1019823",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1019823"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.python.org/issue2586"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-2444"
        },
        {
          "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
        },
        {
          "name": "3802",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/3802"
        },
        {
          "name": "31365",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31365"
        },
        {
          "name": "oval:org.mitre.oval:def:8249",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8249"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/css/P8/documents/100074697"
        },
        {
          "name": "31255",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31255"
        },
        {
          "name": "20080409 IOActive Security Advisory: Buffer overflow in Python zlib extension module",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/490690/100/0/threaded"
        },
        {
          "name": "DSA-1620",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1620"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0149"
        },
        {
          "name": "oval:org.mitre.oval:def:9407",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9407"
        },
        {
          "name": "SSA:2008-217-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289"
        },
        {
          "name": "ADV-2009-3316",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3316"
        },
        {
          "name": "29889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29889"
        },
        {
          "name": "oval:org.mitre.oval:def:8494",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8494"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-1721",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-200807-01",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200807-01.xml"
            },
            {
              "name": "ADV-2008-1229",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/1229/references"
            },
            {
              "name": "30872",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30872"
            },
            {
              "name": "28715",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/28715"
            },
            {
              "name": "38675",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38675"
            },
            {
              "name": "33937",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33937"
            },
            {
              "name": "MDVSA-2008:085",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:085"
            },
            {
              "name": "37471",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37471"
            },
            {
              "name": "29955",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29955"
            },
            {
              "name": "DSA-1551",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1551"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
            },
            {
              "name": "http://support.apple.com/kb/HT3438",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3438"
            },
            {
              "name": "APPLE-SA-2009-02-12",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
            },
            {
              "name": "31358",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31358"
            },
            {
              "name": "zlib-pystringfromstringandsize-bo(41748)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41748"
            },
            {
              "name": "USN-632-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-632-1"
            },
            {
              "name": "1019823",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1019823"
            },
            {
              "name": "http://bugs.python.org/issue2586",
              "refsource": "CONFIRM",
              "url": "http://bugs.python.org/issue2586"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-2444",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-2444"
            },
            {
              "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
            },
            {
              "name": "3802",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/3802"
            },
            {
              "name": "31365",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31365"
            },
            {
              "name": "oval:org.mitre.oval:def:8249",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8249"
            },
            {
              "name": "http://support.avaya.com/css/P8/documents/100074697",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/css/P8/documents/100074697"
            },
            {
              "name": "31255",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31255"
            },
            {
              "name": "20080409 IOActive Security Advisory: Buffer overflow in Python zlib extension module",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/490690/100/0/threaded"
            },
            {
              "name": "DSA-1620",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1620"
            },
            {
              "name": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0149",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0149"
            },
            {
              "name": "oval:org.mitre.oval:def:9407",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9407"
            },
            {
              "name": "SSA:2008-217-01",
              "refsource": "SLACKWARE",
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289"
            },
            {
              "name": "ADV-2009-3316",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3316"
            },
            {
              "name": "29889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29889"
            },
            {
              "name": "oval:org.mitre.oval:def:8494",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8494"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-1721",
    "datePublished": "2008-04-10T19:00:00",
    "dateReserved": "2008-04-10T00:00:00",
    "dateUpdated": "2024-08-07T08:32:01.129Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-2315

Vulnerability from cvelistv5

Published

2008-08-01 14:00

Modified

2024-08-07 08:58

Severity ?

Summary

Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.vupen.com/english/advisories/2008/2288	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/32793	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/44173	vdb-entry, x_refsource_XF
	http://www.securityfocus.com/bid/30491	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/38675	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/33937	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/37471	third-party-advisory, x_refsource_SECUNIA
	http://www.openwall.com/lists/oss-security/2008/11/05/3	mailing-list, x_refsource_MLIST
	http://secunia.com/advisories/31687	third-party-advisory, x_refsource_SECUNIA
	http://www.openwall.com/lists/oss-security/2008/11/05/2	mailing-list, x_refsource_MLIST
	http://www.vmware.com/security/advisories/VMSA-2009-0016.html	x_refsource_CONFIRM
	http://security.gentoo.org/glsa/glsa-200807-16.xml	vendor-advisory, x_refsource_GENTOO
	http://support.apple.com/kb/HT3438	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://secunia.com/advisories/31358	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/31332	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-632-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:164	vendor-advisory, x_refsource_MANDRIVA
	http://www.securityfocus.com/archive/1/507985/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/31518	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761	vdb-entry, signature, x_refsource_OVAL
	https://exchange.xforce.ibmcloud.com/vulnerabilities/44172	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/31305	third-party-advisory, x_refsource_SECUNIA
	http://bugs.gentoo.org/show_bug.cgi?id=230640	x_refsource_CONFIRM
	http://secunia.com/advisories/31365	third-party-advisory, x_refsource_SECUNIA
	http://support.avaya.com/css/P8/documents/100074697	x_refsource_CONFIRM
	http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900	x_refsource_CONFIRM
	http://bugs.gentoo.org/attachment.cgi?id=159418&action=view	x_refsource_CONFIRM
	http://www.debian.org/security/2008/dsa-1667	vendor-advisory, x_refsource_DEBIAN
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:163	vendor-advisory, x_refsource_MANDRIVA
	http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289	vendor-advisory, x_refsource_SLACKWARE
	http://www.vupen.com/english/advisories/2009/3316	vdb-entry, x_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445	vdb-entry, signature, x_refsource_OVAL

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T08:58:01.529Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SR:2008:017",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html"
          },
          {
            "name": "ADV-2008-2288",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2288"
          },
          {
            "name": "32793",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32793"
          },
          {
            "name": "python-multiple-bo(44173)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44173"
          },
          {
            "name": "30491",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/30491"
          },
          {
            "name": "38675",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38675"
          },
          {
            "name": "33937",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33937"
          },
          {
            "name": "oval:org.mitre.oval:def:8683",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683"
          },
          {
            "name": "37471",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37471"
          },
          {
            "name": "[oss-security] 20081105 Re: CVE Request - Python string expandtabs",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2008/11/05/3"
          },
          {
            "name": "31687",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31687"
          },
          {
            "name": "[oss-security] 20081105 CVE Request - Python string expandtabs",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2008/11/05/2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
          },
          {
            "name": "GLSA-200807-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200807-16.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3438"
          },
          {
            "name": "APPLE-SA-2009-02-12",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
          },
          {
            "name": "31358",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31358"
          },
          {
            "name": "31332",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31332"
          },
          {
            "name": "USN-632-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-632-1"
          },
          {
            "name": "MDVSA-2008:164",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:164"
          },
          {
            "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
          },
          {
            "name": "31518",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31518"
          },
          {
            "name": "oval:org.mitre.oval:def:9761",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761"
          },
          {
            "name": "python-modules-bo(44172)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44172"
          },
          {
            "name": "31305",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31305"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=230640"
          },
          {
            "name": "31365",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31365"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/css/P8/documents/100074697"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.gentoo.org/attachment.cgi?id=159418\u0026action=view"
          },
          {
            "name": "DSA-1667",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1667"
          },
          {
            "name": "MDVSA-2008:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:163"
          },
          {
            "name": "SSA:2008-217-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289"
          },
          {
            "name": "ADV-2009-3316",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3316"
          },
          {
            "name": "oval:org.mitre.oval:def:8445",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-07-31T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules.  NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SUSE-SR:2008:017",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html"
        },
        {
          "name": "ADV-2008-2288",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2288"
        },
        {
          "name": "32793",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32793"
        },
        {
          "name": "python-multiple-bo(44173)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44173"
        },
        {
          "name": "30491",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/30491"
        },
        {
          "name": "38675",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38675"
        },
        {
          "name": "33937",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33937"
        },
        {
          "name": "oval:org.mitre.oval:def:8683",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683"
        },
        {
          "name": "37471",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37471"
        },
        {
          "name": "[oss-security] 20081105 Re: CVE Request - Python string expandtabs",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2008/11/05/3"
        },
        {
          "name": "31687",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31687"
        },
        {
          "name": "[oss-security] 20081105 CVE Request - Python string expandtabs",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2008/11/05/2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
        },
        {
          "name": "GLSA-200807-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200807-16.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3438"
        },
        {
          "name": "APPLE-SA-2009-02-12",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
        },
        {
          "name": "31358",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31358"
        },
        {
          "name": "31332",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31332"
        },
        {
          "name": "USN-632-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-632-1"
        },
        {
          "name": "MDVSA-2008:164",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:164"
        },
        {
          "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
        },
        {
          "name": "31518",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31518"
        },
        {
          "name": "oval:org.mitre.oval:def:9761",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761"
        },
        {
          "name": "python-modules-bo(44172)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44172"
        },
        {
          "name": "31305",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31305"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.gentoo.org/show_bug.cgi?id=230640"
        },
        {
          "name": "31365",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31365"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/css/P8/documents/100074697"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.gentoo.org/attachment.cgi?id=159418\u0026action=view"
        },
        {
          "name": "DSA-1667",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1667"
        },
        {
          "name": "MDVSA-2008:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:163"
        },
        {
          "name": "SSA:2008-217-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289"
        },
        {
          "name": "ADV-2009-3316",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3316"
        },
        {
          "name": "oval:org.mitre.oval:def:8445",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-2315",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules.  NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SR:2008:017",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html"
            },
            {
              "name": "ADV-2008-2288",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/2288"
            },
            {
              "name": "32793",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32793"
            },
            {
              "name": "python-multiple-bo(44173)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44173"
            },
            {
              "name": "30491",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/30491"
            },
            {
              "name": "38675",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38675"
            },
            {
              "name": "33937",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33937"
            },
            {
              "name": "oval:org.mitre.oval:def:8683",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683"
            },
            {
              "name": "37471",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37471"
            },
            {
              "name": "[oss-security] 20081105 Re: CVE Request - Python string expandtabs",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2008/11/05/3"
            },
            {
              "name": "31687",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31687"
            },
            {
              "name": "[oss-security] 20081105 CVE Request - Python string expandtabs",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2008/11/05/2"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
            },
            {
              "name": "GLSA-200807-16",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200807-16.xml"
            },
            {
              "name": "http://support.apple.com/kb/HT3438",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3438"
            },
            {
              "name": "APPLE-SA-2009-02-12",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
            },
            {
              "name": "31358",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31358"
            },
            {
              "name": "31332",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31332"
            },
            {
              "name": "USN-632-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-632-1"
            },
            {
              "name": "MDVSA-2008:164",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:164"
            },
            {
              "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
            },
            {
              "name": "31518",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31518"
            },
            {
              "name": "oval:org.mitre.oval:def:9761",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761"
            },
            {
              "name": "python-modules-bo(44172)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44172"
            },
            {
              "name": "31305",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31305"
            },
            {
              "name": "http://bugs.gentoo.org/show_bug.cgi?id=230640",
              "refsource": "CONFIRM",
              "url": "http://bugs.gentoo.org/show_bug.cgi?id=230640"
            },
            {
              "name": "31365",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31365"
            },
            {
              "name": "http://support.avaya.com/css/P8/documents/100074697",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/css/P8/documents/100074697"
            },
            {
              "name": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900",
              "refsource": "CONFIRM",
              "url": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900"
            },
            {
              "name": "http://bugs.gentoo.org/attachment.cgi?id=159418\u0026action=view",
              "refsource": "CONFIRM",
              "url": "http://bugs.gentoo.org/attachment.cgi?id=159418\u0026action=view"
            },
            {
              "name": "DSA-1667",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1667"
            },
            {
              "name": "MDVSA-2008:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:163"
            },
            {
              "name": "SSA:2008-217-01",
              "refsource": "SLACKWARE",
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289"
            },
            {
              "name": "ADV-2009-3316",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3316"
            },
            {
              "name": "oval:org.mitre.oval:def:8445",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-2315",
    "datePublished": "2008-08-01T14:00:00",
    "dateReserved": "2008-05-18T00:00:00",
    "dateUpdated": "2024-08-07T08:58:01.529Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-4864

Vulnerability from cvelistv5

Published

2008-10-31 22:00

Modified

2024-08-07 10:31

Severity ?

Summary

Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679.

References

▼	URL	Tags
	http://svn.python.org/view/python/trunk/Modules/imageop.c?rev=66689&view=diff&r1=66689&r2=66688&p1=python/trunk/Modules/imageop.c&p2=/python/trunk/Modules/imageop.c	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10702	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/33937	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8354	vdb-entry, signature, x_refsource_OVAL
	http://scary.beasts.org/security/CESA-2008-008.html	x_refsource_MISC
	https://exchange.xforce.ibmcloud.com/vulnerabilities/46606	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/37471	third-party-advisory, x_refsource_SECUNIA
	http://www.vmware.com/security/advisories/VMSA-2009-0016.html	x_refsource_CONFIRM
	http://support.apple.com/kb/HT3438	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://svn.python.org/view?rev=66689&view=rev	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/31976	vdb-entry, x_refsource_BID
	http://www.securityfocus.com/archive/1/507985/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.securityfocus.com/bid/31932	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2008/10/27/2	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2008/10/29/3	mailing-list, x_refsource_MLIST
	http://www.vupen.com/english/advisories/2009/3316	vdb-entry, x_refsource_VUPEN

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:31:28.014Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.python.org/view/python/trunk/Modules/imageop.c?rev=66689\u0026view=diff\u0026r1=66689\u0026r2=66688\u0026p1=python/trunk/Modules/imageop.c\u0026p2=/python/trunk/Modules/imageop.c"
          },
          {
            "name": "oval:org.mitre.oval:def:10702",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10702"
          },
          {
            "name": "33937",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33937"
          },
          {
            "name": "oval:org.mitre.oval:def:8354",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8354"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://scary.beasts.org/security/CESA-2008-008.html"
          },
          {
            "name": "python-image-module-bo(46606)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46606"
          },
          {
            "name": "37471",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37471"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3438"
          },
          {
            "name": "APPLE-SA-2009-02-12",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.python.org/view?rev=66689\u0026view=rev"
          },
          {
            "name": "31976",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/31976"
          },
          {
            "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
          },
          {
            "name": "31932",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/31932"
          },
          {
            "name": "[oss-security] 20081027 CVE request -- Python imageop#3",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2008/10/27/2"
          },
          {
            "name": "[oss-security] 20081029 CVE Request - Python imageop",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2008/10/29/3"
          },
          {
            "name": "ADV-2009-3316",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3316"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-10-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.python.org/view/python/trunk/Modules/imageop.c?rev=66689\u0026view=diff\u0026r1=66689\u0026r2=66688\u0026p1=python/trunk/Modules/imageop.c\u0026p2=/python/trunk/Modules/imageop.c"
        },
        {
          "name": "oval:org.mitre.oval:def:10702",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10702"
        },
        {
          "name": "33937",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33937"
        },
        {
          "name": "oval:org.mitre.oval:def:8354",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8354"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://scary.beasts.org/security/CESA-2008-008.html"
        },
        {
          "name": "python-image-module-bo(46606)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46606"
        },
        {
          "name": "37471",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37471"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3438"
        },
        {
          "name": "APPLE-SA-2009-02-12",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.python.org/view?rev=66689\u0026view=rev"
        },
        {
          "name": "31976",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/31976"
        },
        {
          "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
        },
        {
          "name": "31932",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/31932"
        },
        {
          "name": "[oss-security] 20081027 CVE request -- Python imageop#3",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2008/10/27/2"
        },
        {
          "name": "[oss-security] 20081029 CVE Request - Python imageop",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2008/10/29/3"
        },
        {
          "name": "ADV-2009-3316",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3316"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-4864",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://svn.python.org/view/python/trunk/Modules/imageop.c?rev=66689\u0026view=diff\u0026r1=66689\u0026r2=66688\u0026p1=python/trunk/Modules/imageop.c\u0026p2=/python/trunk/Modules/imageop.c",
              "refsource": "CONFIRM",
              "url": "http://svn.python.org/view/python/trunk/Modules/imageop.c?rev=66689\u0026view=diff\u0026r1=66689\u0026r2=66688\u0026p1=python/trunk/Modules/imageop.c\u0026p2=/python/trunk/Modules/imageop.c"
            },
            {
              "name": "oval:org.mitre.oval:def:10702",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10702"
            },
            {
              "name": "33937",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33937"
            },
            {
              "name": "oval:org.mitre.oval:def:8354",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8354"
            },
            {
              "name": "http://scary.beasts.org/security/CESA-2008-008.html",
              "refsource": "MISC",
              "url": "http://scary.beasts.org/security/CESA-2008-008.html"
            },
            {
              "name": "python-image-module-bo(46606)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46606"
            },
            {
              "name": "37471",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37471"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
            },
            {
              "name": "http://support.apple.com/kb/HT3438",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3438"
            },
            {
              "name": "APPLE-SA-2009-02-12",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
            },
            {
              "name": "http://svn.python.org/view?rev=66689\u0026view=rev",
              "refsource": "CONFIRM",
              "url": "http://svn.python.org/view?rev=66689\u0026view=rev"
            },
            {
              "name": "31976",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/31976"
            },
            {
              "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
            },
            {
              "name": "31932",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/31932"
            },
            {
              "name": "[oss-security] 20081027 CVE request -- Python imageop#3",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2008/10/27/2"
            },
            {
              "name": "[oss-security] 20081029 CVE Request - Python imageop",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2008/10/29/3"
            },
            {
              "name": "ADV-2009-3316",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3316"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-4864",
    "datePublished": "2008-10-31T22:00:00",
    "dateReserved": "2008-10-31T00:00:00",
    "dateUpdated": "2024-08-07T10:31:28.014Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-3144

Vulnerability from cvelistv5

Published

2008-08-01 14:00

Modified

2024-08-07 09:28

Severity ?

Summary

Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations. NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error.

References

▼	URL	Tags
	http://www.securityfocus.com/archive/1/495445/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.vupen.com/english/advisories/2008/2288	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/32793	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/44173	vdb-entry, x_refsource_XF
	http://www.securityfocus.com/bid/30491	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/33937	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37471	third-party-advisory, x_refsource_SECUNIA
	http://bugs.python.org/issue2589	x_refsource_CONFIRM
	http://secunia.com/advisories/31687	third-party-advisory, x_refsource_SECUNIA
	http://www.vmware.com/security/advisories/VMSA-2009-0016.html	x_refsource_CONFIRM
	http://security.gentoo.org/glsa/glsa-200807-16.xml	vendor-advisory, x_refsource_GENTOO
	http://support.apple.com/kb/HT3438	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://secunia.com/advisories/31358	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/31332	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-632-1	vendor-advisory, x_refsource_UBUNTU
	http://bugs.gentoo.org/show_bug.cgi?id=232137	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:164	vendor-advisory, x_refsource_MANDRIVA
	http://svn.python.org/view?rev=63734&view=rev	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/507985/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://bugs.python.org/issue2588	x_refsource_CONFIRM
	http://secunia.com/advisories/31518	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/44171	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/31305	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/31365	third-party-advisory, x_refsource_SECUNIA
	http://svn.python.org/view?rev=63728&view=rev	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7725	vdb-entry, signature, x_refsource_OVAL
	http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900	x_refsource_CONFIRM
	http://secunia.com/advisories/31473	third-party-advisory, x_refsource_SECUNIA
	http://wiki.rpath.com/Advisories:rPSA-2008-0243	x_refsource_CONFIRM
	http://www.debian.org/security/2008/dsa-1667	vendor-advisory, x_refsource_DEBIAN
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:163	vendor-advisory, x_refsource_MANDRIVA
	http://svn.python.org/view?rev=63883&view=rev	x_refsource_CONFIRM
	http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289	vendor-advisory, x_refsource_SLACKWARE
	http://www.vupen.com/english/advisories/2009/3316	vdb-entry, x_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10170	vdb-entry, signature, x_refsource_OVAL

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T09:28:41.220Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20080813 rPSA-2008-0243-1 idle python",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/495445/100/0/threaded"
          },
          {
            "name": "SUSE-SR:2008:017",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html"
          },
          {
            "name": "ADV-2008-2288",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2288"
          },
          {
            "name": "32793",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32793"
          },
          {
            "name": "python-multiple-bo(44173)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44173"
          },
          {
            "name": "30491",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/30491"
          },
          {
            "name": "33937",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33937"
          },
          {
            "name": "37471",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37471"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.python.org/issue2589"
          },
          {
            "name": "31687",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31687"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
          },
          {
            "name": "GLSA-200807-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200807-16.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3438"
          },
          {
            "name": "APPLE-SA-2009-02-12",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
          },
          {
            "name": "31358",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31358"
          },
          {
            "name": "31332",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31332"
          },
          {
            "name": "USN-632-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-632-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=232137"
          },
          {
            "name": "MDVSA-2008:164",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:164"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.python.org/view?rev=63734\u0026view=rev"
          },
          {
            "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.python.org/issue2588"
          },
          {
            "name": "31518",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31518"
          },
          {
            "name": "python-pyosvsnprintf-bo(44171)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44171"
          },
          {
            "name": "31305",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31305"
          },
          {
            "name": "31365",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31365"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.python.org/view?rev=63728\u0026view=rev"
          },
          {
            "name": "oval:org.mitre.oval:def:7725",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7725"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900"
          },
          {
            "name": "31473",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31473"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0243"
          },
          {
            "name": "DSA-1667",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1667"
          },
          {
            "name": "MDVSA-2008:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:163"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.python.org/view?rev=63883\u0026view=rev"
          },
          {
            "name": "SSA:2008-217-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289"
          },
          {
            "name": "ADV-2009-3316",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3316"
          },
          {
            "name": "oval:org.mitre.oval:def:10170",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10170"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-07-31T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations.  NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20080813 rPSA-2008-0243-1 idle python",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/495445/100/0/threaded"
        },
        {
          "name": "SUSE-SR:2008:017",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html"
        },
        {
          "name": "ADV-2008-2288",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2288"
        },
        {
          "name": "32793",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32793"
        },
        {
          "name": "python-multiple-bo(44173)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44173"
        },
        {
          "name": "30491",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/30491"
        },
        {
          "name": "33937",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33937"
        },
        {
          "name": "37471",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37471"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.python.org/issue2589"
        },
        {
          "name": "31687",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31687"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
        },
        {
          "name": "GLSA-200807-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200807-16.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3438"
        },
        {
          "name": "APPLE-SA-2009-02-12",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
        },
        {
          "name": "31358",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31358"
        },
        {
          "name": "31332",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31332"
        },
        {
          "name": "USN-632-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-632-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.gentoo.org/show_bug.cgi?id=232137"
        },
        {
          "name": "MDVSA-2008:164",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:164"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.python.org/view?rev=63734\u0026view=rev"
        },
        {
          "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.python.org/issue2588"
        },
        {
          "name": "31518",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31518"
        },
        {
          "name": "python-pyosvsnprintf-bo(44171)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44171"
        },
        {
          "name": "31305",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31305"
        },
        {
          "name": "31365",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31365"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.python.org/view?rev=63728\u0026view=rev"
        },
        {
          "name": "oval:org.mitre.oval:def:7725",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7725"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900"
        },
        {
          "name": "31473",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31473"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0243"
        },
        {
          "name": "DSA-1667",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1667"
        },
        {
          "name": "MDVSA-2008:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:163"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.python.org/view?rev=63883\u0026view=rev"
        },
        {
          "name": "SSA:2008-217-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289"
        },
        {
          "name": "ADV-2009-3316",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3316"
        },
        {
          "name": "oval:org.mitre.oval:def:10170",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10170"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-3144",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations.  NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20080813 rPSA-2008-0243-1 idle python",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/495445/100/0/threaded"
            },
            {
              "name": "SUSE-SR:2008:017",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html"
            },
            {
              "name": "ADV-2008-2288",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/2288"
            },
            {
              "name": "32793",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32793"
            },
            {
              "name": "python-multiple-bo(44173)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44173"
            },
            {
              "name": "30491",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/30491"
            },
            {
              "name": "33937",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33937"
            },
            {
              "name": "37471",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37471"
            },
            {
              "name": "http://bugs.python.org/issue2589",
              "refsource": "CONFIRM",
              "url": "http://bugs.python.org/issue2589"
            },
            {
              "name": "31687",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31687"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
            },
            {
              "name": "GLSA-200807-16",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200807-16.xml"
            },
            {
              "name": "http://support.apple.com/kb/HT3438",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3438"
            },
            {
              "name": "APPLE-SA-2009-02-12",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
            },
            {
              "name": "31358",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31358"
            },
            {
              "name": "31332",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31332"
            },
            {
              "name": "USN-632-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-632-1"
            },
            {
              "name": "http://bugs.gentoo.org/show_bug.cgi?id=232137",
              "refsource": "CONFIRM",
              "url": "http://bugs.gentoo.org/show_bug.cgi?id=232137"
            },
            {
              "name": "MDVSA-2008:164",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:164"
            },
            {
              "name": "http://svn.python.org/view?rev=63734\u0026view=rev",
              "refsource": "CONFIRM",
              "url": "http://svn.python.org/view?rev=63734\u0026view=rev"
            },
            {
              "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
            },
            {
              "name": "http://bugs.python.org/issue2588",
              "refsource": "CONFIRM",
              "url": "http://bugs.python.org/issue2588"
            },
            {
              "name": "31518",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31518"
            },
            {
              "name": "python-pyosvsnprintf-bo(44171)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44171"
            },
            {
              "name": "31305",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31305"
            },
            {
              "name": "31365",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31365"
            },
            {
              "name": "http://svn.python.org/view?rev=63728\u0026view=rev",
              "refsource": "CONFIRM",
              "url": "http://svn.python.org/view?rev=63728\u0026view=rev"
            },
            {
              "name": "oval:org.mitre.oval:def:7725",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7725"
            },
            {
              "name": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900",
              "refsource": "CONFIRM",
              "url": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900"
            },
            {
              "name": "31473",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31473"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0243",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0243"
            },
            {
              "name": "DSA-1667",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1667"
            },
            {
              "name": "MDVSA-2008:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:163"
            },
            {
              "name": "http://svn.python.org/view?rev=63883\u0026view=rev",
              "refsource": "CONFIRM",
              "url": "http://svn.python.org/view?rev=63883\u0026view=rev"
            },
            {
              "name": "SSA:2008-217-01",
              "refsource": "SLACKWARE",
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289"
            },
            {
              "name": "ADV-2009-3316",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3316"
            },
            {
              "name": "oval:org.mitre.oval:def:10170",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10170"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-3144",
    "datePublished": "2008-08-01T14:00:00",
    "dateReserved": "2008-07-10T00:00:00",
    "dateUpdated": "2024-08-07T09:28:41.220Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2007-4965

Vulnerability from cvelistv5

Published

2007-09-18 22:00

Modified

2024-08-07 15:17

Severity ?

Summary

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.

References

▼	URL	Tags
	http://lists.vmware.com/pipermail/security-announce/2008/000005.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/25696	vdb-entry, x_refsource_BID
	http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0254	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2007/4238	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/38675	third-party-advisory, x_refsource_SECUNIA
	http://www.us-cert.gov/cas/techalerts/TA07-352A.html	third-party-advisory, x_refsource_CERT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8496	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/33937	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28136	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37471	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/27460	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28480	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/26837	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/3201	vdb-entry, x_refsource_VUPEN
	http://www.debian.org/security/2008/dsa-1551	vendor-advisory, x_refsource_DEBIAN
	http://www.vmware.com/security/advisories/VMSA-2009-0016.html	x_refsource_CONFIRM
	http://secunia.com/advisories/29303	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8486	vdb-entry, signature, x_refsource_OVAL
	http://support.apple.com/kb/HT3438	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://secunia.com/advisories/27872	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29032	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/31492	third-party-advisory, x_refsource_SECUNIA
	https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00378.html	vendor-advisory, x_refsource_FEDORA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10804	vdb-entry, signature, x_refsource_OVAL
	http://www.redhat.com/support/errata/RHSA-2008-0629.html	vendor-advisory, x_refsource_REDHAT
	http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065826.html	mailing-list, x_refsource_FULLDISC
	http://www.securityfocus.com/archive/1/488457/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html	vendor-advisory, x_refsource_APPLE
	http://www.redhat.com/support/errata/RHSA-2007-1076.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/archive/1/507985/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.vupen.com/english/advisories/2008/0637	vdb-entry, x_refsource_VUPEN
	https://exchange.xforce.ibmcloud.com/vulnerabilities/36653	vdb-entry, x_refsource_XF
	http://bugs.gentoo.org/show_bug.cgi?id=192876	x_refsource_CONFIRM
	http://docs.info.apple.com/article.html?artnum=307179	x_refsource_CONFIRM
	http://secunia.com/advisories/27562	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-585-1	vendor-advisory, x_refsource_UBUNTU
	http://www.gentoo.org/security/en/glsa/glsa-200711-07.xml	vendor-advisory, x_refsource_GENTOO
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:012	vendor-advisory, x_refsource_MANDRIVA
	http://support.avaya.com/css/P8/documents/100074697	x_refsource_CONFIRM
	http://secunia.com/advisories/31255	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/487990/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:013	vendor-advisory, x_refsource_MANDRIVA
	http://www.debian.org/security/2008/dsa-1620	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/28838	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html	vendor-advisory, x_refsource_SUSE
	https://issues.rpath.com/browse/RPL-1885	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2009/3316	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/29889	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T15:17:27.603Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[Security-announce] 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.vmware.com/pipermail/security-announce/2008/000005.html"
          },
          {
            "name": "25696",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/25696"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0254"
          },
          {
            "name": "ADV-2007-4238",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/4238"
          },
          {
            "name": "38675",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38675"
          },
          {
            "name": "TA07-352A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA07-352A.html"
          },
          {
            "name": "oval:org.mitre.oval:def:8496",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8496"
          },
          {
            "name": "33937",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33937"
          },
          {
            "name": "28136",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28136"
          },
          {
            "name": "37471",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37471"
          },
          {
            "name": "27460",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27460"
          },
          {
            "name": "28480",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28480"
          },
          {
            "name": "26837",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26837"
          },
          {
            "name": "ADV-2007-3201",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/3201"
          },
          {
            "name": "DSA-1551",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1551"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
          },
          {
            "name": "29303",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29303"
          },
          {
            "name": "oval:org.mitre.oval:def:8486",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8486"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3438"
          },
          {
            "name": "APPLE-SA-2009-02-12",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
          },
          {
            "name": "27872",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27872"
          },
          {
            "name": "29032",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29032"
          },
          {
            "name": "31492",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31492"
          },
          {
            "name": "FEDORA-2007-2663",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00378.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10804",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10804"
          },
          {
            "name": "RHSA-2008:0629",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0629.html"
          },
          {
            "name": "20070916 python \u003c= 2.5.1 standart librairy multiples int overflow, heap overflow in imageop module",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065826.html"
          },
          {
            "name": "20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/488457/100/0/threaded"
          },
          {
            "name": "APPLE-SA-2007-12-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html"
          },
          {
            "name": "RHSA-2007:1076",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-1076.html"
          },
          {
            "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
          },
          {
            "name": "ADV-2008-0637",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0637"
          },
          {
            "name": "python-imageop-bo(36653)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36653"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=192876"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://docs.info.apple.com/article.html?artnum=307179"
          },
          {
            "name": "27562",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27562"
          },
          {
            "name": "USN-585-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-585-1"
          },
          {
            "name": "GLSA-200711-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200711-07.xml"
          },
          {
            "name": "MDVSA-2008:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:012"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/css/P8/documents/100074697"
          },
          {
            "name": "31255",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31255"
          },
          {
            "name": "20080212 FLEA-2008-0002-1 python",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/487990/100/0/threaded"
          },
          {
            "name": "MDVSA-2008:013",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:013"
          },
          {
            "name": "DSA-1620",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1620"
          },
          {
            "name": "28838",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28838"
          },
          {
            "name": "SUSE-SR:2008:003",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1885"
          },
          {
            "name": "ADV-2009-3316",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3316"
          },
          {
            "name": "29889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29889"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-09-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[Security-announce] 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.vmware.com/pipermail/security-announce/2008/000005.html"
        },
        {
          "name": "25696",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/25696"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0254"
        },
        {
          "name": "ADV-2007-4238",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/4238"
        },
        {
          "name": "38675",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38675"
        },
        {
          "name": "TA07-352A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA07-352A.html"
        },
        {
          "name": "oval:org.mitre.oval:def:8496",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8496"
        },
        {
          "name": "33937",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33937"
        },
        {
          "name": "28136",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28136"
        },
        {
          "name": "37471",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37471"
        },
        {
          "name": "27460",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27460"
        },
        {
          "name": "28480",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28480"
        },
        {
          "name": "26837",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26837"
        },
        {
          "name": "ADV-2007-3201",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/3201"
        },
        {
          "name": "DSA-1551",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1551"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
        },
        {
          "name": "29303",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29303"
        },
        {
          "name": "oval:org.mitre.oval:def:8486",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8486"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3438"
        },
        {
          "name": "APPLE-SA-2009-02-12",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
        },
        {
          "name": "27872",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27872"
        },
        {
          "name": "29032",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29032"
        },
        {
          "name": "31492",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31492"
        },
        {
          "name": "FEDORA-2007-2663",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00378.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10804",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10804"
        },
        {
          "name": "RHSA-2008:0629",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0629.html"
        },
        {
          "name": "20070916 python \u003c= 2.5.1 standart librairy multiples int overflow, heap overflow in imageop module",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065826.html"
        },
        {
          "name": "20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/488457/100/0/threaded"
        },
        {
          "name": "APPLE-SA-2007-12-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html"
        },
        {
          "name": "RHSA-2007:1076",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-1076.html"
        },
        {
          "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
        },
        {
          "name": "ADV-2008-0637",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0637"
        },
        {
          "name": "python-imageop-bo(36653)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36653"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.gentoo.org/show_bug.cgi?id=192876"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://docs.info.apple.com/article.html?artnum=307179"
        },
        {
          "name": "27562",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27562"
        },
        {
          "name": "USN-585-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-585-1"
        },
        {
          "name": "GLSA-200711-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200711-07.xml"
        },
        {
          "name": "MDVSA-2008:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:012"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/css/P8/documents/100074697"
        },
        {
          "name": "31255",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31255"
        },
        {
          "name": "20080212 FLEA-2008-0002-1 python",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/487990/100/0/threaded"
        },
        {
          "name": "MDVSA-2008:013",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:013"
        },
        {
          "name": "DSA-1620",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1620"
        },
        {
          "name": "28838",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28838"
        },
        {
          "name": "SUSE-SR:2008:003",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1885"
        },
        {
          "name": "ADV-2009-3316",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3316"
        },
        {
          "name": "29889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29889"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-4965",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[Security-announce] 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
              "refsource": "MLIST",
              "url": "http://lists.vmware.com/pipermail/security-announce/2008/000005.html"
            },
            {
              "name": "25696",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/25696"
            },
            {
              "name": "http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0254",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0254"
            },
            {
              "name": "ADV-2007-4238",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/4238"
            },
            {
              "name": "38675",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38675"
            },
            {
              "name": "TA07-352A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA07-352A.html"
            },
            {
              "name": "oval:org.mitre.oval:def:8496",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8496"
            },
            {
              "name": "33937",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33937"
            },
            {
              "name": "28136",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28136"
            },
            {
              "name": "37471",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37471"
            },
            {
              "name": "27460",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27460"
            },
            {
              "name": "28480",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28480"
            },
            {
              "name": "26837",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26837"
            },
            {
              "name": "ADV-2007-3201",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/3201"
            },
            {
              "name": "DSA-1551",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1551"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
            },
            {
              "name": "29303",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29303"
            },
            {
              "name": "oval:org.mitre.oval:def:8486",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8486"
            },
            {
              "name": "http://support.apple.com/kb/HT3438",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3438"
            },
            {
              "name": "APPLE-SA-2009-02-12",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
            },
            {
              "name": "27872",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27872"
            },
            {
              "name": "29032",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29032"
            },
            {
              "name": "31492",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31492"
            },
            {
              "name": "FEDORA-2007-2663",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00378.html"
            },
            {
              "name": "oval:org.mitre.oval:def:10804",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10804"
            },
            {
              "name": "RHSA-2008:0629",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0629.html"
            },
            {
              "name": "20070916 python \u003c= 2.5.1 standart librairy multiples int overflow, heap overflow in imageop module",
              "refsource": "FULLDISC",
              "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065826.html"
            },
            {
              "name": "20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/488457/100/0/threaded"
            },
            {
              "name": "APPLE-SA-2007-12-17",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html"
            },
            {
              "name": "RHSA-2007:1076",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-1076.html"
            },
            {
              "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
            },
            {
              "name": "ADV-2008-0637",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0637"
            },
            {
              "name": "python-imageop-bo(36653)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36653"
            },
            {
              "name": "http://bugs.gentoo.org/show_bug.cgi?id=192876",
              "refsource": "CONFIRM",
              "url": "http://bugs.gentoo.org/show_bug.cgi?id=192876"
            },
            {
              "name": "http://docs.info.apple.com/article.html?artnum=307179",
              "refsource": "CONFIRM",
              "url": "http://docs.info.apple.com/article.html?artnum=307179"
            },
            {
              "name": "27562",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27562"
            },
            {
              "name": "USN-585-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-585-1"
            },
            {
              "name": "GLSA-200711-07",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200711-07.xml"
            },
            {
              "name": "MDVSA-2008:012",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:012"
            },
            {
              "name": "http://support.avaya.com/css/P8/documents/100074697",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/css/P8/documents/100074697"
            },
            {
              "name": "31255",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31255"
            },
            {
              "name": "20080212 FLEA-2008-0002-1 python",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/487990/100/0/threaded"
            },
            {
              "name": "MDVSA-2008:013",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:013"
            },
            {
              "name": "DSA-1620",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1620"
            },
            {
              "name": "28838",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28838"
            },
            {
              "name": "SUSE-SR:2008:003",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1885",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1885"
            },
            {
              "name": "ADV-2009-3316",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3316"
            },
            {
              "name": "29889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29889"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-4965",
    "datePublished": "2007-09-18T22:00:00",
    "dateReserved": "2007-09-18T00:00:00",
    "dateUpdated": "2024-08-07T15:17:27.603Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-5031

Vulnerability from cvelistv5

Published

2008-11-10 16:00

Modified

2024-08-07 10:40

Severity ?

Summary

Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315.

References

▼	URL	Tags
	http://svn.python.org/view/python/trunk/Objects/unicodeobject.c?rev=61350&view=diff&r1=61350&r2=61349&p1=python/trunk/Objects/unicodeobject.c&p2=/python/trunk/Objects/unicodeobject.c	x_refsource_CONFIRM
	http://security.gentoo.org/glsa/glsa-200907-16.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/33937	third-party-advisory, x_refsource_SECUNIA
	http://scary.beasts.org/security/CESA-2008-008.html	x_refsource_MISC
	http://secunia.com/advisories/37471	third-party-advisory, x_refsource_SECUNIA
	http://www.openwall.com/lists/oss-security/2008/11/05/3	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2008/11/05/2	mailing-list, x_refsource_MLIST
	http://www.vmware.com/security/advisories/VMSA-2009-0016.html	x_refsource_CONFIRM
	http://support.apple.com/kb/HT3438	x_refsource_CONFIRM
	http://svn.python.org/view?rev=61350&view=rev	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://www.securityfocus.com/archive/1/507985/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	https://exchange.xforce.ibmcloud.com/vulnerabilities/46612	vdb-entry, x_refsource_XF
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8564	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/35750	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11280	vdb-entry, signature, x_refsource_OVAL
	http://svn.python.org/view/python/trunk/Objects/stringobject.c?rev=61350&view=diff&r1=61350&r2=61349&p1=python/trunk/Objects/stringobject.c&p2=/python/trunk/Objects/stringobject.c	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2009/3316	vdb-entry, x_refsource_VUPEN

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:40:17.351Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.python.org/view/python/trunk/Objects/unicodeobject.c?rev=61350\u0026view=diff\u0026r1=61350\u0026r2=61349\u0026p1=python/trunk/Objects/unicodeobject.c\u0026p2=/python/trunk/Objects/unicodeobject.c"
          },
          {
            "name": "GLSA-200907-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200907-16.xml"
          },
          {
            "name": "33937",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33937"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://scary.beasts.org/security/CESA-2008-008.html"
          },
          {
            "name": "37471",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37471"
          },
          {
            "name": "[oss-security] 20081105 Re: CVE Request - Python string expandtabs",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2008/11/05/3"
          },
          {
            "name": "[oss-security] 20081105 CVE Request - Python string expandtabs",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2008/11/05/2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3438"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.python.org/view?rev=61350\u0026view=rev"
          },
          {
            "name": "APPLE-SA-2009-02-12",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
          },
          {
            "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
          },
          {
            "name": "python-expandtabs-integer-overflow(46612)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46612"
          },
          {
            "name": "oval:org.mitre.oval:def:8564",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8564"
          },
          {
            "name": "35750",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35750"
          },
          {
            "name": "oval:org.mitre.oval:def:11280",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11280"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.python.org/view/python/trunk/Objects/stringobject.c?rev=61350\u0026view=diff\u0026r1=61350\u0026r2=61349\u0026p1=python/trunk/Objects/stringobject.c\u0026p2=/python/trunk/Objects/stringobject.c"
          },
          {
            "name": "ADV-2009-3316",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3316"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-11-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c.  NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.python.org/view/python/trunk/Objects/unicodeobject.c?rev=61350\u0026view=diff\u0026r1=61350\u0026r2=61349\u0026p1=python/trunk/Objects/unicodeobject.c\u0026p2=/python/trunk/Objects/unicodeobject.c"
        },
        {
          "name": "GLSA-200907-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200907-16.xml"
        },
        {
          "name": "33937",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33937"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://scary.beasts.org/security/CESA-2008-008.html"
        },
        {
          "name": "37471",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37471"
        },
        {
          "name": "[oss-security] 20081105 Re: CVE Request - Python string expandtabs",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2008/11/05/3"
        },
        {
          "name": "[oss-security] 20081105 CVE Request - Python string expandtabs",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2008/11/05/2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3438"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.python.org/view?rev=61350\u0026view=rev"
        },
        {
          "name": "APPLE-SA-2009-02-12",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
        },
        {
          "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
        },
        {
          "name": "python-expandtabs-integer-overflow(46612)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46612"
        },
        {
          "name": "oval:org.mitre.oval:def:8564",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8564"
        },
        {
          "name": "35750",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35750"
        },
        {
          "name": "oval:org.mitre.oval:def:11280",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11280"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.python.org/view/python/trunk/Objects/stringobject.c?rev=61350\u0026view=diff\u0026r1=61350\u0026r2=61349\u0026p1=python/trunk/Objects/stringobject.c\u0026p2=/python/trunk/Objects/stringobject.c"
        },
        {
          "name": "ADV-2009-3316",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3316"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5031",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c.  NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://svn.python.org/view/python/trunk/Objects/unicodeobject.c?rev=61350\u0026view=diff\u0026r1=61350\u0026r2=61349\u0026p1=python/trunk/Objects/unicodeobject.c\u0026p2=/python/trunk/Objects/unicodeobject.c",
              "refsource": "CONFIRM",
              "url": "http://svn.python.org/view/python/trunk/Objects/unicodeobject.c?rev=61350\u0026view=diff\u0026r1=61350\u0026r2=61349\u0026p1=python/trunk/Objects/unicodeobject.c\u0026p2=/python/trunk/Objects/unicodeobject.c"
            },
            {
              "name": "GLSA-200907-16",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200907-16.xml"
            },
            {
              "name": "33937",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33937"
            },
            {
              "name": "http://scary.beasts.org/security/CESA-2008-008.html",
              "refsource": "MISC",
              "url": "http://scary.beasts.org/security/CESA-2008-008.html"
            },
            {
              "name": "37471",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37471"
            },
            {
              "name": "[oss-security] 20081105 Re: CVE Request - Python string expandtabs",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2008/11/05/3"
            },
            {
              "name": "[oss-security] 20081105 CVE Request - Python string expandtabs",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2008/11/05/2"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
            },
            {
              "name": "http://support.apple.com/kb/HT3438",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3438"
            },
            {
              "name": "http://svn.python.org/view?rev=61350\u0026view=rev",
              "refsource": "CONFIRM",
              "url": "http://svn.python.org/view?rev=61350\u0026view=rev"
            },
            {
              "name": "APPLE-SA-2009-02-12",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
            },
            {
              "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
            },
            {
              "name": "python-expandtabs-integer-overflow(46612)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46612"
            },
            {
              "name": "oval:org.mitre.oval:def:8564",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8564"
            },
            {
              "name": "35750",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35750"
            },
            {
              "name": "oval:org.mitre.oval:def:11280",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11280"
            },
            {
              "name": "http://svn.python.org/view/python/trunk/Objects/stringobject.c?rev=61350\u0026view=diff\u0026r1=61350\u0026r2=61349\u0026p1=python/trunk/Objects/stringobject.c\u0026p2=/python/trunk/Objects/stringobject.c",
              "refsource": "CONFIRM",
              "url": "http://svn.python.org/view/python/trunk/Objects/stringobject.c?rev=61350\u0026view=diff\u0026r1=61350\u0026r2=61349\u0026p1=python/trunk/Objects/stringobject.c\u0026p2=/python/trunk/Objects/stringobject.c"
            },
            {
              "name": "ADV-2009-3316",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3316"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5031",
    "datePublished": "2008-11-10T16:00:00",
    "dateReserved": "2008-11-10T00:00:00",
    "dateUpdated": "2024-08-07T10:40:17.351Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-1887

Vulnerability from cvelistv5

Published

2008-04-18 17:00

Modified

2024-08-07 08:40

Severity ?

Summary

Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://bugs.python.org/issue2587	x_refsource_CONFIRM
	http://security.gentoo.org/glsa/glsa-200807-01.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/30872	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/506056/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/33937	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8624	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/37471	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/41944	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/31687	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10407	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/archive/1/490776	mailing-list, x_refsource_BUGTRAQ
	http://www.debian.org/security/2008/dsa-1551	vendor-advisory, x_refsource_DEBIAN
	http://www.vmware.com/security/advisories/VMSA-2009-0016.html	x_refsource_CONFIRM
	http://support.apple.com/kb/HT3438	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0122	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/28749	vdb-entry, x_refsource_BID
	http://www.ubuntu.com/usn/usn-632-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/archive/1/507985/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/31518	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/31365	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/31255	third-party-advisory, x_refsource_SECUNIA
	http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900	x_refsource_CONFIRM
	http://www.debian.org/security/2008/dsa-1620	vendor-advisory, x_refsource_DEBIAN
	http://www.vupen.com/english/advisories/2009/3316	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/29889	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T08:40:59.882Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SR:2008:017",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.python.org/issue2587"
          },
          {
            "name": "GLSA-200807-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200807-01.xml"
          },
          {
            "name": "30872",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30872"
          },
          {
            "name": "20090824 rPSA-2009-0122-1 idle python",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/506056/100/0/threaded"
          },
          {
            "name": "33937",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33937"
          },
          {
            "name": "oval:org.mitre.oval:def:8624",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8624"
          },
          {
            "name": "37471",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37471"
          },
          {
            "name": "python-pystringfromstringandsize-bo(41944)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41944"
          },
          {
            "name": "31687",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31687"
          },
          {
            "name": "oval:org.mitre.oval:def:10407",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10407"
          },
          {
            "name": "20080411 IOActive Security Advisory: Incorrect input validation in PyString_FromStringAndSize() leads to multiple buffer overflows",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/490776"
          },
          {
            "name": "DSA-1551",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1551"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3438"
          },
          {
            "name": "APPLE-SA-2009-02-12",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0122"
          },
          {
            "name": "28749",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/28749"
          },
          {
            "name": "USN-632-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-632-1"
          },
          {
            "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
          },
          {
            "name": "31518",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31518"
          },
          {
            "name": "31365",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31365"
          },
          {
            "name": "31255",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31255"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900"
          },
          {
            "name": "DSA-1620",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1620"
          },
          {
            "name": "ADV-2009-3316",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3316"
          },
          {
            "name": "29889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29889"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-04-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SUSE-SR:2008:017",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.python.org/issue2587"
        },
        {
          "name": "GLSA-200807-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200807-01.xml"
        },
        {
          "name": "30872",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30872"
        },
        {
          "name": "20090824 rPSA-2009-0122-1 idle python",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/506056/100/0/threaded"
        },
        {
          "name": "33937",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33937"
        },
        {
          "name": "oval:org.mitre.oval:def:8624",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8624"
        },
        {
          "name": "37471",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37471"
        },
        {
          "name": "python-pystringfromstringandsize-bo(41944)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41944"
        },
        {
          "name": "31687",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31687"
        },
        {
          "name": "oval:org.mitre.oval:def:10407",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10407"
        },
        {
          "name": "20080411 IOActive Security Advisory: Incorrect input validation in PyString_FromStringAndSize() leads to multiple buffer overflows",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/490776"
        },
        {
          "name": "DSA-1551",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1551"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3438"
        },
        {
          "name": "APPLE-SA-2009-02-12",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0122"
        },
        {
          "name": "28749",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/28749"
        },
        {
          "name": "USN-632-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-632-1"
        },
        {
          "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
        },
        {
          "name": "31518",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31518"
        },
        {
          "name": "31365",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31365"
        },
        {
          "name": "31255",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31255"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900"
        },
        {
          "name": "DSA-1620",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1620"
        },
        {
          "name": "ADV-2009-3316",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3316"
        },
        {
          "name": "29889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29889"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-1887",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SR:2008:017",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html"
            },
            {
              "name": "http://bugs.python.org/issue2587",
              "refsource": "CONFIRM",
              "url": "http://bugs.python.org/issue2587"
            },
            {
              "name": "GLSA-200807-01",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200807-01.xml"
            },
            {
              "name": "30872",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30872"
            },
            {
              "name": "20090824 rPSA-2009-0122-1 idle python",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/506056/100/0/threaded"
            },
            {
              "name": "33937",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33937"
            },
            {
              "name": "oval:org.mitre.oval:def:8624",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8624"
            },
            {
              "name": "37471",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37471"
            },
            {
              "name": "python-pystringfromstringandsize-bo(41944)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41944"
            },
            {
              "name": "31687",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31687"
            },
            {
              "name": "oval:org.mitre.oval:def:10407",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10407"
            },
            {
              "name": "20080411 IOActive Security Advisory: Incorrect input validation in PyString_FromStringAndSize() leads to multiple buffer overflows",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/490776"
            },
            {
              "name": "DSA-1551",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1551"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html"
            },
            {
              "name": "http://support.apple.com/kb/HT3438",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3438"
            },
            {
              "name": "APPLE-SA-2009-02-12",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html"
            },
            {
              "name": "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0122",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0122"
            },
            {
              "name": "28749",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/28749"
            },
            {
              "name": "USN-632-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-632-1"
            },
            {
              "name": "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded"
            },
            {
              "name": "31518",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31518"
            },
            {
              "name": "31365",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31365"
            },
            {
              "name": "31255",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31255"
            },
            {
              "name": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900",
              "refsource": "CONFIRM",
              "url": "http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900"
            },
            {
              "name": "DSA-1620",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1620"
            },
            {
              "name": "ADV-2009-3316",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3316"
            },
            {
              "name": "29889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29889"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-1887",
    "datePublished": "2008-04-18T17:00:00",
    "dateReserved": "2008-04-18T00:00:00",
    "dateUpdated": "2024-08-07T08:40:59.882Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature