Lucene search

K
cve[email protected]CVE-2010-1666
HistoryJul 02, 2010 - 7:00 p.m.

CVE-2010-1666

2010-07-0219:00:00
CWE-119
web.nvd.nist.gov
46
cve-2010-1666
buffer overflow
python cjson
ucs-4 encoding
denial of service
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.6%

Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function.

Affected configurations

NVD
Node
dan_pascupython-cjsonMatch1.0.5

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.6%