EDB-31634
remoteunixVERIFIED
Python zlib Module - Remote Buffer Overflow
CVE-2008-1721
Justin Ferguson4/9/2008
説明
Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.
AI分析AIによる分析
影響を受ける製品
pythonpython
pythonpython
debiandebian_linux
4.0
canonicalubuntu_linux
6.06
canonicalubuntu_linux
7.04
canonicalubuntu_linux
7.10
canonicalubuntu_linux
8.04
利用可能なエクスプロイト (1)
参照
- http://bugs.python.org/issue2586Issue TrackingVendor Advisory
- http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.htmlMailing ListThird Party Advisory
- http://secunia.com/advisories/29889Not Applicable
- http://secunia.com/advisories/29955Not Applicable
- http://secunia.com/advisories/30872Not Applicable
- http://secunia.com/advisories/31255Not Applicable
- http://secunia.com/advisories/31358Not Applicable
- http://secunia.com/advisories/31365Not Applicable
- http://secunia.com/advisories/33937Not Applicable
- http://secunia.com/advisories/37471Not Applicable
- http://secunia.com/advisories/38675Not Applicable
- http://security.gentoo.org/glsa/glsa-200807-01.xmlThird Party Advisory
- http://securityreason.com/securityalert/3802ExploitThird Party Advisory
- http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289Third Party Advisory
- http://support.apple.com/kb/HT3438Third Party Advisory
- http://support.avaya.com/css/P8/documents/100074697Third Party Advisory
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0149Broken Link
- http://www.debian.org/security/2008/dsa-1551Third Party Advisory
- http://www.debian.org/security/2008/dsa-1620Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:085Permissions Required