CVE-2008-1887
Critical
Description
Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.
SeverityCritical
CVSS9.3
Exploit probability94. percentile6.3%
Product
Python
PublishedApr 18, 2008
First seenApr 18, 2008
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| python python | v ≤ 2.5.2 | — |
| canonical ubuntu_linux | 6.06, 7.04, 7.10, 8.04 | — |
| debian debian_linux | 4.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.