NetSight
IP …
high7.5Public exploit code

CVE-2014-1912

Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows rem…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.

Affected products

VendorProductAffected versions
PythonPython
Versions 2.5.1, 2.5.2, 2.5.3, 2.5.4, 2.5.6, 2.5.150
AppleMac Os X
through 10.10.4

Weakness classification

CWE-119

References