add info for CVE-2010-2089

CVE-2010-2089/README.md

@@ -2,18 +2,45 @@
 
 ## Experiment Environment
 
+Ubuntu 10.04
+
 ## INSTALL & Configuration
 
+```
+wget https://github.com/mudongliang/source-packages/raw/master/CVE-2010-2089/Python-2.6.tgz
+tar -xvf Python-2.6.tgz
+cd Python-2.6
+./configure
+make
+```
+
 ## Problems in Installation & Configuration
 
+
 ## How to trigger vulnerability
 
+```
+./python -c "import audioop; audioop.reverse('X', 2)"
+```
+
 ## PoCs
 
+[Python 3.2 - 'audioop' Module Memory Corruption](https://www.exploit-db.com/exploits/34145/)
+
+[Python 'audioop' Module Memory Corruption Vulnerability](https://www.securityfocus.com/bid/40863/exploit)
+
+[audioop: check that length is a multiple of the size](https://bugs.python.org/issue7673)
+
 ## Vulnerability Details & Patch
 
 ### Root Cause
 
 ### Stack Trace
 
+### Patch
+
+<https://bugzilla.redhat.com/attachment.cgi?id=418359>
+
 ## References
+
+[Redhat Bugzilla #598197](https://bugzilla.redhat.com/show_bug.cgi?id=598197)

README.md

@@ -150,7 +150,7 @@ If you encounter problems with keyword "Failed to lock files", you could try to
 - [ ] CVE-2010-1450
 - [ ] CVE-2010-1634
 - [ ] CVE-2010-1866
-- [ ] CVE-2010-2089
+- [x] CVE-2010-2089
 - [x] CVE-2010-2481
 - [x] CVE-2010-2482
 - [x] CVE-2010-2810