The utf-16 decoder in Python 3.1 through 3.3 does not update the aligned_end variable after calling the unicode_decode_call_errorhandler function, which allows remote attackers to obtain sensitive information (process memory) or cause a denial of service (memory corruption and crash) via unspecified vectors.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2012-08-14T22:00:00

Updated: 2024-08-06T19:26:09.000Z

Reserved: 2012-04-04T00:00:00

Link: CVE-2012-2135

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2012-08-14T22:55:01.253

Modified: 2024-11-21T01:38:34.297

Link: CVE-2012-2135

cve-icon Redhat

No data.