NetSight
IP …
medium6.4

CVE-2012-2135

The utf-16 decoder in Python 3.1 through 3.3 does not update the aligned_end variable after calling the unicode_decode_call_errorhandler function, which allows…

Impact

The utf-16 decoder in Python 3.1 through 3.3 does not update the aligned_end variable after calling the unicode_decode_call_errorhandler function, which allows remote attackers to obtain sensitive information (process memory) or cause a denial of service (memory corruption and crash) via unspecified vectors.

Affected products

VendorProductAffected versions
PythonPython
from 2.7.0 before 2.7.4
from 3.2.0 before 3.2.4
from 3.3.0 before 3.3.3
CanonicalUbuntu Linux
Versions 10.04, 11.04, 11.10, 12.04, 12.10
DebianDebian Linux
Version 6.0

References