zlib DoS

zlib 1.2 and later versions allows remote attackers to cause a denial of service crash via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file...

FreeBSD : python -- Integer Signedness Error in zlib Module (ec41c3e2-129c-11dd-bab7-0016179b2dd5)

Justin Ferguson reports : Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network...

Debian DSA-1551-1 : python2.4 - several vulnerabilities

Several vulnerabilities have been discovered in the interpreter for the Python language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-2052 Piotr Engelking discovered that the strxfrm function of the locale module miscalculates the length of an...

DSA-1551-1 python2.4 - several vulnerabilities

Bulletin has no description...

Python zlib模块远程溢出漏洞

BUGTRAQ ID: 28715 Python是一种开放源代码的脚本编程语言。 Python的zlib扩展模块中用于flush解压流的方式获取一个输入参数来确定应flush多少数据。这个参数是一个有符型整数，没有经过过滤检查，因此如果传送了负值的话就会导致错误的内存分配，然后有符型整数会被转换为无符整数，触发缓冲区溢出。 Python-2.5.2/Modules/zlibmodule.c： 761 PyDocSTRVARdecompflushdoc, 762 "flush length -- Return a string containing any remaining\n" 763...

Integer overflow

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow...

PSF-2008-2 Multiple integer overflows (Apple)

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow...

CVE-2008-1721

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow...

CVE-2008-1721

CVE-2008-1721: An integer signedness error in the zlib extension module of Python 2.5.2 and earlier enables remote code execution via a negative signed integer, triggering insufficient memory allocation and a buffer overflow. The connected documents corroborate the CVE presence across multiple ad...

python -- Integer Signedness Error in zlib Module

Justin Ferguson reports: Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow...

Python zlib module buffer overflow

Integer overflow in flush leads to buffer overflow...

IOActive Security Advisory: Buffer overflow in Python zlib extension module

Title: Buffer overflow in Python zlib extension module Date Discoverd: ??-April-2008 Date Reported: 08-April-2008 Date Patched: 08-April-2008 Date Disclosed: 09-April-2008 Criticality: Critical Affected Products ----------------- Python 2.5.2, earlier and unstable version are likely to be...

Python zlib Module - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/28715/info Python zlib module is prone to a remote buffer-overflow vulnerability because the library fails to properly sanitize user-supplied data. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running an...

Python zlib Module - Remote Buffer Overflow

Python zlib Module - Remote Buffer Overflow source: https://www.securityfocus.com/bid/28715/info Python zlib module is prone to a remote buffer-overflow vulnerability because the library fails to properly sanitize user-supplied data. An attacker can exploit this issue to execute arbitrary code wi...

Debian Security Advisory DSA 763-1 (zlib)

The remote host is missing an update to zlib announced via advisory DSA 763-1. OpenVAS Vulnerability Test $Id: deb7631.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 763-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 740-1 (zlib)

The remote host is missing an update to zlib announced via advisory DSA 740-1. An error in the way zlib handles the inflation of certain compressed files can cause a program which uses zlib to crash when opening an invalid file. This problem does not affect the old stable distribution woody...

Debian Security Advisory DSA 122-1 (zlib, various)

The remote host is missing an update to zlib, various announced via advisory DSA 122-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian Security Advisory DSA 122-1 (zlib, various)

The remote host is missing an update to zlib, various announced via advisory DSA 122-1. OpenVAS Vulnerability Test $Id: deb1221.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 122-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-763-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-740-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...