CVE-2008-5031 Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs metho...
HighCVSS 10.0
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| python | = 2.2.3 | No fix listed |
| python | = 2.3.7 | No fix listed |
| python | = 2.4.6 | No fix listed |
| python | = 2.5.1 | No fix listed |
References
- APPLE-SA-2009-02-12 vendor-advisory
- scary.beasts.org
- 33937 third-party-advisory vendor-advisory
- 35750 third-party-advisory vendor-advisory
- 37471 third-party-advisory vendor-advisory
- GLSA-200907-16 vendor-advisory
- support.apple.com
- svn.python.org
- svn.python.org
- svn.python.org
- [oss-security] 20081105 CVE Request - Python string expandtabs mailing-list
- [oss-security] 20081105 Re: CVE Request - Python string expandtabs mailing-list
- 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components mailing-list
- www.vmware.com
- ADV-2009-3316 vdb-entry vendor-advisory
- python-expandtabs-integer-overflow(46612) vdb-entry
- oval:org.mitre.oval:def:11280 signature vdb-entry
- oval:org.mitre.oval:def:8564 signature vdb-entry