Description

Python before 3.3.4 RC1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a file size value larger than the size of the zip file to the (1) ZipExtFile.read, (2) ZipExtFile.read(n), (3) ZipExtFile.readlines, (4) ZipFile.extract, or (5) ZipFile.extractall function.

Remediation

References

CVE-2013-7338

Related Vulnerabilities

Jenkins Improper Input Validation Vulnerability (CVE-2012-6073)

WordPress Plugin CP Image Store with Slideshow Arbitrary File Download (1.0.5)

WordPress Plugin Donation Block For PayPal Cross-Site Scripting (2.0.0)

ReviveAdserver Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-7368)

Joomla! Core 3.x.x Cross-Site Scripting (3.7.0 - 3.10.6)

Severity

High

Classification

CVE-2013-7338 CWE-20

Tags

Missing Update Known Vulnerabilities