high7.5
CVE-2005-2875
Py2Play Unpickles Untrusted Objects
Impact
Py2Play allows remote attackers to execute arbitrary Python code via pickled objects, which Py2Play unpickles and executes.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | Py2Play | <= 0.1.8 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Py2play | Py2play | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=326976
- http://secunia.com/advisories/16855
- http://secunia.com/advisories/17106
- http://soya.literati.org/
- http://www.debian.org/security/2005/dsa-856
- http://www.gentoo.org/security/en/glsa/glsa-200509-09.xml
- http://www.securityfocus.com/bid/14864
- https://bugs.gentoo.org/show_bug.cgi?id=103524
- https://github.com/advisories/GHSA-wcpc-f63g-x26q
- https://nvd.nist.gov/vuln/detail/CVE-2005-2875
- https://web.archive.org/web/20040824010038/http://home.gna.org/oomadness/fr/slune/index.html
- https://web.archive.org/web/20050213041706/http://soya.literati.org/
- https://web.archive.org/web/20161225000907/http://www.securityfocus.com/bid/14864