Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Mgiuca

#39610of 53,622
6.9Total CVSS
Vulnerabilities · 1
PT-2010-3326
6.9
2010-07-02
Unknown · Python-Cjson · CVE-2010-1666
**Name of the Vulnerable Software and Affected Versions** python-cjson version 1.0.5 **Description** The issue is related to a buffer overflow that occurs when UCS-4 encoding is enabled. This allows attackers to cause a denial of service, resulting in an application crash, or possibly have other unspecified impacts. The attack vectors involve crafted Unicode input to the `cjson.encode` function. **Recommendations** For python-cjson version 1.0.5, consider disabling UCS-4 encoding as a temporary workaround to minimize the risk of exploitation. Avoid using the `cjson.encode` function with crafted Unicode input until the issue is resolved.