CVE-2006-4980 Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide char...
HighCVSS 7.5
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| python | < 2.3.6 | 2.3.6 |
| python | >= 2.4.0, < 2.4.4 | 2.4.4 |
References
- bugs.debian.org third-party-advisory
- bugzilla.redhat.com issue-tracking
- kb.vmware.com third-party-advisory
- 22276 broken-link patch third-party-advisory vendor-advisory
- 22297 broken-link third-party-advisory
- 22303 broken-link patch third-party-advisory vendor-advisory
- 22357 broken-link third-party-advisory
- 22358 broken-link third-party-advisory
- 22379 broken-link third-party-advisory
- 22448 broken-link third-party-advisory
- 22487 broken-link third-party-advisory
- 22512 broken-link third-party-advisory
- 22531 broken-link third-party-advisory
- 22639 broken-link third-party-advisory
- 23680 broken-link third-party-advisory
- 31492 broken-link third-party-advisory
- GLSA-200610-07 third-party-advisory vendor-advisory
- 1017019 third-party-advisory vdb-entry
- sourceforge.net third-party-advisory
- support.avaya.com third-party-advisory
- DSA-1197 third-party-advisory vendor-advisory
- DSA-1198 third-party-advisory vendor-advisory
- MDKSA-2006:181 broken-link third-party-advisory vendor-advisory
- SUSE-SR:2006:025 third-party-advisory vendor-advisory
- RHSA-2006:0713 third-party-advisory vendor-advisory
- RHSA-2008:0629 third-party-advisory vendor-advisory
- 20061011 rPSA-2006-0187-1 idle python mailing-list third-party-advisory vdb-entry
- 20070110 VMware ESX server security updates mailing-list third-party-advisory vdb-entry
- 20376 third-party-advisory vdb-entry
- USN-359-1 third-party-advisory vendor-advisory
- www.vmware.com third-party-advisory
- www.vmware.com third-party-advisory
- ADV-2006-3940 broken-link vdb-entry
- ADV-2006-5131 broken-link vdb-entry
- zoehep.xent.com third-party-advisory
- python-repr-bo(29408) broken-link vdb-entry
- issues.rpath.com third-party-advisory
- launchpad.net third-party-advisory
- oval:org.mitre.oval:def:10789 broken-link signature vdb-entry