CVE-2010-1666

Advisory

Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function.

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1666
• http://secunia.com/advisories/40335
• https://bugs.launchpad.net/ubuntu/+source/python-cjson/+bug/585274
• http://www.vupen.com/english/advisories/2010/1774
• http://www.debian.org/security/2010/dsa-2068
• http://secunia.com/advisories/40500