python

2007-05-12

Page content

Author: voroskoi
Vulnerable: 2.5-2
Unaffected: 2.5-3terminus1

Piotr Engelking has reported a security issue in Python, which can be exploited by malicious people to disclose potentially sensitive information. The security issue is caused due to an off-by-one error within the “PyLocale_strxfrm()” function in Modules/_localemodule.c, which can be exploited to disclose certain parts of the memory.

Bug Tracker URL: http://bugs.frugalware.org/task/2033

CVEs:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2052