CVE-2010-1666: Improper Restriction of Operations within… – CVSS 6.8 · Watchpost

← All vulnerabilities

Improper Restriction of Operations within the Bounds of a Memory Buffer in python-cjson

MEDIUM 6.8CVE-2010-1666 · GHSA-cqmh-mpx2-g633 · PYSEC-2010-30 · Published 02/07/2010 · updated 16/06/2026

In short

CVE-2010-1666 is a MEDIUM (CVSS 6.8) vulnerability affecting python-cjson, python-cjson (dan pascu).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 76.8% of all vulnerabilities.
Fix: update to 1.0.5.1, 1.1.0 or later.

Package	Affected versions	Patched versions
python-cjson PyPI	`< 1.0.5.1< 1.1.0`	`1.0.5.11.1.0`
python-cjson dan_pascu	`= 1.0.5`	No fix yet

Description

Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function.

NVD description

Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function.

References

nvd.nist.gov/vuln/detail/CVE-2010-1666 · ADVISORY
AGProjects/python-cjson commit dc2b878 · WEB
bugs.launchpad.net/ubuntu/+source/python-cjson/+bug/585274 · WEB
AGProjects/python-cjson · PACKAGE
pypa/advisory-database · WEB
debian.org/security/2010/dsa-2068 · WEB
secunia.com/advisories/40335 · Vendor Advisory
secunia.com/advisories/40500
vupen.com/english/advisories/2010/1774
GitHub Advisory GHSA-cqmh-mpx2-g633 · ADVISORY

More vulnerabilities in python-cjson

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free