Published: 14/08/2012 Updated: 19/01/2023

CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10

VMScore: 570

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P

The utf-16 decoder in Python 3.1 up to and including 3.3 does not update the aligned_end variable after calling the unicode_decode_call_errorhandler function, which allows remote malicious users to obtain sensitive information (process memory) or cause a denial of service (memory corruption and crash) via unspecified vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
python python
canonical ubuntu linux 11.04
canonical ubuntu linux 11.10
canonical ubuntu linux 12.10
canonical ubuntu linux 10.04
canonical ubuntu linux 12.04
debian debian linux 6.0

Several security issues were fixed in Python 32 ...

Several security issues were fixed in Python 31 ...

NVD-CWE-Other http://bugs.python.org/issue14579 http://www.openwall.com/lists/oss-security/2012/04/25/4 http://www.openwall.com/lists/oss-security/2012/04/25/2 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=670389 http://www.ubuntu.com/usn/USN-1615-1 http://secunia.com/advisories/51089 http://www.ubuntu.com/usn/USN-1616-1 http://secunia.com/advisories/51087 https://nvd.nist.gov https://usn.ubuntu.com/1615-1/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2012-2135

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect