Description

Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.

Remediation

References

CVE-2014-1912

Related Vulnerabilities

PHP Improper Input Validation Vulnerability (CVE-2006-7243)

Dolibarr Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-1010054)

WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.10)

Drupal Core 9.1.x Cross-Site Scripting (9.1.0 - 9.1.6)

Opencart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-20491)

Severity

High

Classification

CVE-2014-1912 CWE-119

Tags

Missing Update Known Vulnerabilities