Security Advisory

CVE-2008-3144

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-08-01 14:00:00
Last updated 2024-08-07 09:28:41
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations. NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error.