exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files

Mandriva Linux Security Advisory 2010-132

Posted Jul 15, 2010

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2010-132 - Multiple integer overflows in audioop.c in the audioop module in Ptthon allow context-dependent attackers to cause a denial of service (application crash) via a large fragment, as demonstrated by a call to audioop.lin2lin with a long string in the first argument, leading to a buffer overflow. The audioop module in Python does not verify the relationships between size arguments and byte string lengths, which allows context-dependent attackers to cause a denial of service (memory corruption and application crash) via crafted arguments, as demonstrated by a call to audioop.reverse with a one-byte string, a different vulnerability than CVE-2010-1634.

tags | advisory, denial of service, overflow, python

systems | linux, mandriva

advisories | CVE-2010-1634, CVE-2010-2089

SHA-256 | e9e1a86c719f1ef874c01c3ca18ca975feec3df77970303af5fb6c2539510eb9

Download | Favorite | View