CVE-2008-2315

Experiment Environment

Ubuntu 10.04

INSTALL & Configuration

wget https://github.com/mudongliang/source-packages/raw/master/CVE-2008-2315/Python-2.5.1.tar.bz2
tar -xvf Python-2.5.1.tar.bz2
cd Python-2.5.1
./configure
make

Problems in Installation & Configuration

How to trigger vulnerability

./python python-2.5.2-unicode_resize-utf16.py
./python python-2.5.2-unicode_resize-utf7.py
./python python-2.5.2-unicode_resize-utf8.py

PoCs

Multiple buffer overflows in unicode processing

Vulnerability Details & Patch

Root Cause

Stack Trace

Patch

References