AZL-109563
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-109563.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-109563
- Upstream
- CVE-2008-1887
- Published
- 2008-04-18T17:05:00Z
- Modified
- 2026-10-27T05:36:16Z
- Summary
- CVE-2008-1887 affecting package python-py 1.11.0-1
- Details
-
Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.
- References