NetSight
IP …
medium5.0Public exploit code

CVE-2010-2089

The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent attac…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent attackers to cause a denial of service (memory corruption and application crash) via crafted arguments, as demonstrated by a call to audioop.reverse with a one-byte string, a different vulnerability than CVE-2010-1634.

Affected products

VendorProductAffected versions
PythonPython
from 2.5.0 before 2.5.6
from 2.6.0 before 2.6.6
from 3.1.0 before 3.1.3

Weakness classification

CWE-787

References