CVE-2008-5031
- State
- Published
- Severity
- Not scored
- Published
- Nov 10, 2008
- Updated
- Aug 7, 2024
- Reserved
- Nov 10, 2008
Description
Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://svn.python.org/view/python/trunk/Objects/unicodeobject.c?rev=61350&view=diff&r1=61350&r2=61349&p1=python/trunk/Objects/unicodeobject.c&p2=/python/trunk/Objects/unicodeobject.c
- GLSA-200907-16vendor-advisory
- 33937third-party-advisory
- http://scary.beasts.org/security/CESA-2008-008.html
- 37471third-party-advisory
- [oss-security] 20081105 Re: CVE Request - Python string expandtabsmailing-list
- [oss-security] 20081105 CVE Request - Python string expandtabsmailing-list
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html
- http://support.apple.com/kb/HT3438
- http://svn.python.org/view?rev=61350&view=rev
- APPLE-SA-2009-02-12vendor-advisory
- 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party componentsmailing-list
- python-expandtabs-integer-overflow(46612)vdb-entry
- oval:org.mitre.oval:def:8564vdb-entrysignature
- 35750third-party-advisory
- oval:org.mitre.oval:def:11280vdb-entrysignature
- http://svn.python.org/view/python/trunk/Objects/stringobject.c?rev=61350&view=diff&r1=61350&r2=61349&p1=python/trunk/Objects/stringobject.c&p2=/python/trunk/Objects/stringobject.c
- ADV-2009-3316vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.