CVE-2010-1666: Improper Restriction of Operations within… – CVSS 6.8 · Watchpost

← All vulnerabilities

Improper Restriction of Operations within the Bounds of a Memory Buffer in python-cjson

MOYENNE 6.8CVE-2010-1666 · GHSA-cqmh-mpx2-g633 · PYSEC-2010-30 · Published 02/07/2010 · updated 16/06/2026

En bref

CVE-2010-1666 est une vulnérabilité MOYENNE (CVSS 6.8) touchant python-cjson, python-cjson (dan pascu).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.7%, plus élevée que 76.8% des vulnérabilités.
Correctif : mettre à jour vers 1.0.5.1, 1.1.0 ou plus récent.

Package	Affected versions	Patched versions
python-cjson PyPI	`< 1.0.5.1< 1.1.0`	`1.0.5.11.1.0`
python-cjson dan_pascu	`= 1.0.5`	No fix yet

Description

Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function.

NVD description

Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function.

References

nvd.nist.gov/vuln/detail/CVE-2010-1666 · ADVISORY
AGProjects/python-cjson commit dc2b878 · WEB
bugs.launchpad.net/ubuntu/+source/python-cjson/+bug/585274 · WEB
AGProjects/python-cjson · PACKAGE
pypa/advisory-database · WEB
debian.org/security/2010/dsa-2068 · WEB
secunia.com/advisories/40335 · Vendor Advisory
secunia.com/advisories/40500
vupen.com/english/advisories/2010/1774
GitHub Advisory GHSA-cqmh-mpx2-g633 · ADVISORY

Autres vulnérabilités de python-cjson

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free