CVE-2008-1721

EUVD-2008-1722
Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
Affected Products (NVD)
VendorProductVersion
pythonpython
2.4.0 ≤
𝑥
< 2.4.6
pythonpython
2.5.0 ≤
𝑥
≤ 2.5.2
debiandebian_linux
4.0
canonicalubuntu_linux
6.06
canonicalubuntu_linux
7.04
canonicalubuntu_linux
7.10
canonicalubuntu_linux
8.04
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
python2.4
dapper
Fixed 2.4.3-0ubuntu6.2
released
edgy
ignored
feisty
Fixed 2.4.4-2ubuntu7.2
released
gutsy
Fixed 2.4.4-6ubuntu4.2
released
hardy
not-affected
python2.5
dapper
dne
edgy
ignored
feisty
Fixed 2.5.1-0ubuntu1.2
released
gutsy
Fixed 2.5.1-5ubuntu5.2
released
hardy
not-affected
References