CVE-2014-4616

Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to…

published August 24, 2017

CVSS
—
EPSS
8%
Percentile
94.7
In the wild
Unconfirmed
What it is

Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07845 · 94.7th percentile
Published
2017-08-24T20:00Z
EPSS history
Timeline
  • 24 AUG 20:00Z
    Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to…
    cvelistv5