CVE-2008-1887

Published: Apr 18, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.

Affected (6)

Products: Python: Python · Canonical: Ubuntu Linux · Debian: Debian Linux

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Python Python	Up to 2.5.2

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 7.04
Canonical Ubuntu Linux	Version 7.10
Canonical Ubuntu Linux	Version 8.04

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 4.0

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (54)

http://bugs.python.org/issue2587

Source: cve@mitre.org

ExploitIssue TrackingVendor Advisory

http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://secunia.com/advisories/29889

Source: cve@mitre.org

Not Applicable

http://secunia.com/advisories/30872

Source: cve@mitre.org

Not Applicable

http://secunia.com/advisories/31255

Source: cve@mitre.org

Not Applicable

http://secunia.com/advisories/31365

Source: cve@mitre.org

Not Applicable

http://secunia.com/advisories/31518

Source: cve@mitre.org

Not Applicable

http://secunia.com/advisories/31687

Source: cve@mitre.org

Not Applicable

http://secunia.com/advisories/33937

Source: cve@mitre.org

Not Applicable

http://secunia.com/advisories/37471

Source: cve@mitre.org

Not Applicable

http://security.gentoo.org/glsa/glsa-200807-01.xml

Source: cve@mitre.org

Third Party Advisory

http://support.apple.com/kb/HT3438

Source: cve@mitre.org

Third Party Advisory

http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0122

Source: cve@mitre.org

Broken Link

http://www.debian.org/security/2008/dsa-1551

Source: cve@mitre.org

PatchThird Party Advisory

http://www.debian.org/security/2008/dsa-1620

Source: cve@mitre.org

PatchThird Party Advisory

http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/archive/1/490776

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/506056/100/0/threaded

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/28749

Source: cve@mitre.org

PatchThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/usn-632-1

Source: cve@mitre.org

Third Party Advisory

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2009/3316

Source: cve@mitre.org

Permissions Required

https://exchange.xforce.ibmcloud.com/vulnerabilities/41944

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10407

Source: cve@mitre.org

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8624

Source: cve@mitre.org

Third Party Advisory

http://bugs.python.org/issue2587