CVE-2008-1721

State: Published
Severity: Not scored
Published: Apr 10, 2008
Updated: Aug 7, 2024
Reserved: Apr 10, 2008

Description

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

GLSA-200807-01vendor-advisory
ADV-2008-1229vdb-entry
30872third-party-advisory
28715vdb-entry
38675third-party-advisory
33937third-party-advisory
MDVSA-2008:085vendor-advisory
37471third-party-advisory
29955third-party-advisory
DSA-1551vendor-advisory
http://www.vmware.com/security/advisories/VMSA-2009-0016.html
http://support.apple.com/kb/HT3438
APPLE-SA-2009-02-12vendor-advisory
31358third-party-advisory
zlib-pystringfromstringandsize-bo(41748)vdb-entry
USN-632-1vendor-advisory
1019823vdb-entry
http://bugs.python.org/issue2586
https://issues.rpath.com/browse/RPL-2444
20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party componentsmailing-list
3802third-party-advisory
31365third-party-advisory
oval:org.mitre.oval:def:8249vdb-entrysignature
http://support.avaya.com/css/P8/documents/100074697
31255third-party-advisory
20080409 IOActive Security Advisory: Buffer overflow in Python zlib extension modulemailing-list
DSA-1620vendor-advisory
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0149
oval:org.mitre.oval:def:9407vdb-entrysignature
SSA:2008-217-01vendor-advisory
ADV-2009-3316vdb-entry
29889third-party-advisory
oval:org.mitre.oval:def:8494vdb-entrysignature

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.