CVE-2008-1721

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.

• CWE-681

• http://bugs.python.org/issue2586Issue Tracking, Vendor Advisory
• http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.htmlMailing List, Third Party Advisory
• http://secunia.com/advisories/29889Not Applicable
• http://secunia.com/advisories/29955Not Applicable
• http://secunia.com/advisories/30872Not Applicable
• http://secunia.com/advisories/31255Not Applicable
• http://secunia.com/advisories/31358Not Applicable
• http://secunia.com/advisories/31365Not Applicable
• http://secunia.com/advisories/33937Not Applicable
• http://secunia.com/advisories/37471Not Applicable
• http://secunia.com/advisories/38675Not Applicable
• http://security.gentoo.org/glsa/glsa-200807-01.xmlThird Party Advisory
• http://securityreason.com/securityalert/3802Exploit, Third Party Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289Third Party Advisory
• http://support.apple.com/kb/HT3438Third Party Advisory
• http://support.avaya.com/css/P8/documents/100074697Third Party Advisory
• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0149Broken Link
• http://www.debian.org/security/2008/dsa-1551Third Party Advisory
• http://www.debian.org/security/2008/dsa-1620Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:085Permissions Required
• http://www.securityfocus.com/archive/1/490690/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/507985/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/28715Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1019823Broken Link, Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/usn-632-1Third Party Advisory
• http://www.vmware.com/security/advisories/VMSA-2009-0016.htmlThird Party Advisory
• http://www.vupen.com/english/advisories/2008/1229/referencesPermissions Required
• http://www.vupen.com/english/advisories/2009/3316Permissions Required
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41748Third Party Advisory, VDB Entry
• https://issues.rpath.com/browse/RPL-2444Broken Link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8249Third Party Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8494Broken Link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9407Third Party Advisory
• http://bugs.python.org/issue2586Issue Tracking, Vendor Advisory
• http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.htmlMailing List, Third Party Advisory
• http://secunia.com/advisories/29889Not Applicable
• http://secunia.com/advisories/29955Not Applicable
• http://secunia.com/advisories/30872Not Applicable
• http://secunia.com/advisories/31255Not Applicable
• http://secunia.com/advisories/31358Not Applicable
• http://secunia.com/advisories/31365Not Applicable
• http://secunia.com/advisories/33937Not Applicable
• http://secunia.com/advisories/37471Not Applicable
• http://secunia.com/advisories/38675Not Applicable
• http://security.gentoo.org/glsa/glsa-200807-01.xmlThird Party Advisory
• http://securityreason.com/securityalert/3802Exploit, Third Party Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289Third Party Advisory
• http://support.apple.com/kb/HT3438Third Party Advisory
• http://support.avaya.com/css/P8/documents/100074697Third Party Advisory
• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0149Broken Link
• http://www.debian.org/security/2008/dsa-1551Third Party Advisory
• http://www.debian.org/security/2008/dsa-1620Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:085Permissions Required
• http://www.securityfocus.com/archive/1/490690/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/507985/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/28715Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1019823Broken Link, Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/usn-632-1Third Party Advisory
• http://www.vmware.com/security/advisories/VMSA-2009-0016.htmlThird Party Advisory
• http://www.vupen.com/english/advisories/2008/1229/referencesPermissions Required
• http://www.vupen.com/english/advisories/2009/3316Permissions Required
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41748Third Party Advisory, VDB Entry
• https://issues.rpath.com/browse/RPL-2444Broken Link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8249Third Party Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8494Broken Link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9407Third Party Advisory

Published

Apr 10, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-1715SQL injection vulnerability in content/user.php in AuraCMS 2…
• CVE-2008-1716Cross-site scripting (XSS) vulnerability in WoltLab Communit…
• CVE-2008-1717WoltLab Community Framework (WCF) 1.0.6 in WoltLab Burning B…
• CVE-2008-1718Buffer overflow in mimesr.dll in Autonomy (formerly Verity) …
• CVE-2008-1719Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2008-1720Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attri…
• CVE-2008-1722Multiple integer overflows in (1) filter/image-png.c and (2)…
• CVE-2008-1724Stack-based buffer overflow in the IActiveXTransfer.FileTran…
• CVE-2008-1725The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx…
• CVE-2008-1726Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6…
• CVE-2008-1727KnowledgeQuest 2.5 and 2.6 does not require authentication f…
• CVE-2008-1728ConnectionManagerImpl.java in Ignite Realtime Openfire 3.4.5…