Approved changes feed: RSS · Atom

cpe:2.3:a:python:python:2.4.0:*:*:*:*:*:*:*

part: a version: 2.4.0 update: *

VendorPython (b57ad93a-6195-5192-9423-6cfad6044a8b)
ProductPython (fc328eef-0a85-5ddb-b629-b8866ec518c8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/python purl2cpe 2026-06-01 10:16:29.242077
pkg:github/python/cpython purl2cpe 2026-06-01 10:16:29.242078
pkg:python/python purl2cpe 2026-06-01 10:16:29.242080
pkg:rpm/opensuse/python purl2cpe 2026-06-01 10:16:29.242081

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-2052 vulnerable 2026-06-03 14:28:07.375806 Details available
Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.
Published: 2007-04-16T22:00:00.000Z
Updated: 2024-08-07T13:23:50.498Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0089 vulnerable 2026-06-03 14:26:49.131421 Details available
The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.
Published: 2005-02-06T05:00:00.000Z
Updated: 2024-08-07T20:57:40.920Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.