Description

Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.

Remediation

References

CVE-2014-1912

Related Vulnerabilities

Opencart Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-28838)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-40604)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7846)

Jenkins Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-2101)

Oracle JRE CVE-2013-5824 Vulnerability (CVE-2013-5824)

Severity

High

Classification

CVE-2014-1912 CWE-119

Tags

Missing Update Known Vulnerabilities