Description

The utf-16 decoder in Python 3.1 through 3.3 does not update the aligned_end variable after calling the unicode_decode_call_errorhandler function, which allows remote attackers to obtain sensitive information (process memory) or cause a denial of service (memory corruption and crash) via unspecified vectors.

Remediation

References

CVE-2012-2135

Related Vulnerabilities

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Security Bypass (5.7.13)

Oracle Database Server CVE-2016-5516 Vulnerability (CVE-2016-5516)

WordPress Plugin Seatgeek Affiliate Tickets Cross-Site Scripting (1.0.2)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4956)

WordPress Plugin Mailing List 'wpabspath' Parameter Remote File Include (1.3.3)

Severity

Medium

Classification

CVE-2012-2135

Tags

Missing Update Known Vulnerabilities