CVE-2010-3493
- EPSS 1.92%
- Veröffentlicht 19.10.2010 20:00:04
- Zuletzt bearbeitet 29.04.2026 01:13:23
Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept f...
- EPSS 2.61%
- Veröffentlicht 27.05.2010 19:30:01
- Zuletzt bearbeitet 29.04.2026 01:13:23
Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service (application crash) via a large ZSIZE value in a black-and-white (aka B/W) RGB image that triggers an invalid pointer dereference.
CVE-2010-1449
- EPSS 3.79%
- Veröffentlicht 27.05.2010 19:30:01
- Zuletzt bearbeitet 29.04.2026 01:13:23
Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-...
CVE-2010-1450
- EPSS 2.82%
- Veröffentlicht 27.05.2010 19:30:01
- Zuletzt bearbeitet 29.04.2026 01:13:23
Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expan...
- EPSS 1.22%
- Veröffentlicht 27.05.2010 19:30:01
- Zuletzt bearbeitet 29.04.2026 01:13:23
Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent attackers to cause a denial of service (application crash) via a large fragment, as demonstrated by a call to audioop.lin2lin with ...
- EPSS 9.97%
- Veröffentlicht 27.05.2010 19:30:01
- Zuletzt bearbeitet 29.04.2026 01:13:23
The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent attackers to cause a denial of service (memory corruption and application crash) via crafted arg...
CVE-2008-5983
- EPSS 0.12%
- Veröffentlicht 28.01.2009 02:30:00
- Zuletzt bearbeitet 23.04.2026 00:35:47
Untrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string to sys.path when the argv[0] argument does not contain a path separator, which might allow local us...
- EPSS 2.69%
- Veröffentlicht 10.11.2008 16:15:12
- Zuletzt bearbeitet 23.04.2026 00:35:47
Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs fun...
CVE-2008-4864
- EPSS 10.93%
- Veröffentlicht 01.11.2008 00:00:01
- Zuletzt bearbeitet 23.04.2026 00:35:47
Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function,...
CVE-2008-2315
- EPSS 0.93%
- Veröffentlicht 01.08.2008 14:41:00
- Zuletzt bearbeitet 23.04.2026 00:35:47
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7)...