Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.
When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Python | Python | 2.4.0 (including) | 2.4.6 (excluding) |
| Python | Python | 2.5.0 (including) | 2.5.2 (including) |
| Red Hat Enterprise Linux 4 | RedHat | python-0:2.3.4-14.7.el4_8.2 | * |
| Red Hat Enterprise Linux 5 | RedHat | python-0:2.4.3-24.el5_3.6 | * |
| Python2.4 | Ubuntu | dapper | * |
| Python2.4 | Ubuntu | edgy | * |
| Python2.4 | Ubuntu | feisty | * |
| Python2.4 | Ubuntu | gutsy | * |
| Python2.5 | Ubuntu | edgy | * |
| Python2.5 | Ubuntu | feisty | * |
| Python2.5 | Ubuntu | gutsy | * |