CVE-2008-1721

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 94%
VendorProductVersion
pythonpython
2.4.0 ≤
𝑥
< 2.4.6
pythonpython
2.5.0 ≤
𝑥
≤ 2.5.2
debiandebian_linux
4.0
canonicalubuntu_linux
6.06
canonicalubuntu_linux
7.04
canonicalubuntu_linux
7.10
canonicalubuntu_linux
8.04
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
python2.4
hardy
not-affected
gutsy
Fixed 2.4.4-6ubuntu4.2
released
feisty
Fixed 2.4.4-2ubuntu7.2
released
edgy
ignored
dapper
Fixed 2.4.3-0ubuntu6.2
released
python2.5
hardy
not-affected
gutsy
Fixed 2.5.1-5ubuntu5.2
released
feisty
Fixed 2.5.1-0ubuntu1.2
released
edgy
ignored
dapper
dne
References