NetSight
IP …
medium5.0

CVE-2010-1634

Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent attackers to cause a denial of service (…

Impact

Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent attackers to cause a denial of service (application crash) via a large fragment, as demonstrated by a call to audioop.lin2lin with a long string in the first argument, leading to a buffer overflow. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-3143.5.

Affected products

VendorProductAffected versions
PythonPython
from 2.5.0 before 2.5.6
from 2.6.0 before 2.6.6
from 3.1.0 before 3.1.3
FedoraprojectFedora
Version 13
OpensuseOpensuse
Versions 11.2, 11.3
SuseLinux Enterprise Server
Versions 10, 11
CanonicalUbuntu Linux
Versions 8.04, 10.04, 11.04, 11.10

Weakness classification

CWE-190

References