full-disclosure - Re: python <= 2.5.1 standart librairy multiples int overflow, heap overflow in imageop module

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Sun, 16 Sep 2007 16:14:40 +0200
From: "Slythers Bro" <slythers@...il.com>
To: "Andrew Farmer" <andfarm@...il.com>
Cc: Full-Disclosure dis <full-disclosure@...ts.grok.org.uk>
Subject: Re: python <= 2.5.1 standart librairy multiples
	int overflow, heap overflow in imageop module

yeah that's right.

Maybe the real question is, if they don't know how secure an int overflow in
imageop module, maybe other modules are vulns too.
I think nobody really take the time to audit python source code, when i
found the vuln in ten minutes just for proof to a friend that's python isn't
more secure than php.
The python' source code look like old. So old == potential vulns

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/