ID:11446 - Exploit for Incorrect Conversion between Numeric Types in Python - CVE-2008-1721

 
Main Vulnerability Database Exploits ID:11446 - Exploit for Incorrect Conversion between Numeric Types in Python - CVE-2008-1721

ID:11446 - Exploit for Incorrect Conversion between Numeric Types in Python - CVE-2008-1721

Published: June 3, 2025


Vulnerability identifier: #VU110166
Vulnerability risk: Medium
CVE-ID: CVE-2008-1721
CWE-ID: CWE-681
Exploitation vector: Remote access
Vulnerable software:
Python

Link to public exploit:


Vulnerability description

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.


Remediation

Install update from vendor's website.