CVE-2008-1721

 

Published at: - 10-04-2008 09:05

Last modified: - 05-07-2022 08:43

Total changes: - 2

Description

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:P/I:P/A:P

 

Verification logic

 

Reference

• http://bugs.python.org/issue2586
• 28715-Third Party Advisory, VDB Entry
• 3802-Exploit, Third Party Advisory
• MDVSA-2008:085-Permissions Required
• DSA-1551-Third Party Advisory
• 29889-Not Applicable
• 1019823-Broken Link, Third Party Advisory, VDB Entry
• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0149
• https://issues.rpath.com/browse/RPL-2444
• 29955-Not Applicable
• 30872-Not Applicable
• USN-632-1-Third Party Advisory
• GLSA-200807-01-Third Party Advisory
• DSA-1620-Third Party Advisory
• 31358-Not Applicable
• SSA:2008-217-01-Third Party Advisory
• 31365-Not Applicable
• 31255-Not Applicable
• APPLE-SA-2009-02-12-Mailing List, Third Party Advisory
• 33937-Not Applicable
• http://support.apple.com/kb/HT3438
• http://www.vmware.com/security/advisories/VMSA-2009-0016.html
• 37471-Not Applicable
• ADV-2009-3316-Permissions Required
• http://support.avaya.com/css/P8/documents/100074697
• 38675-Not Applicable
• ADV-2008-1229-Permissions Required
• zlib-pystringfromstringandsize-bo(41748)-Third Party Advisory, VDB Entry
• oval:org.mitre.oval:def:9407-Third Party Advisory
• oval:org.mitre.oval:def:8494-Broken Link
• oval:org.mitre.oval:def:8249-Third Party Advisory
• 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components-Third Party Advisory, VDB Entry
• 20080409 IOActive Security Advisory: Buffer overflow in Python zlib extension module-Third Party Advisory, VDB Entry

 

Keywords

NVD

 

CVE-2008-1721

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures