CVE-2008-1721

Python < 2.4.6 - Remote Code Execution via Integer Signedness Error in zlib Extension

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-1721. PoCs published by Justin Ferguson.

AI-analyzed exploit summary This exploit demonstrates a buffer overflow vulnerability in the Python zlib module (CVE-2008-1721) by passing invalid negative values to the `flush` method of a decompressobj, leading to potential arbitrary code execution or denial-of-service.

Description

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Justin Ferguson · pythonremoteunix
https://www.exploit-db.com/exploits/31634

This exploit demonstrates a buffer overflow vulnerability in the Python zlib module (CVE-2008-1721) by passing invalid negative values to the `flush` method of a decompressobj, leading to potential arbitrary code execution or denial-of-service.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Python zlib module (Python 2.5.2 and possibly others)
No auth needed
Prerequisites: Python 2.5.2 or vulnerable version with zlib module
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (33)

Core 33
Core References
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200807-01.xml
Permissions Required vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1229/references
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30872
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/28715
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/38675
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/33937
Permissions Required vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2008:085
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37471
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29955
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2008/dsa-1551
Third Party Advisory x_refsource_confirm
http://www.vmware.com/security/advisories/VMSA-2009-0016.html
Third Party Advisory x_refsource_confirm
http://support.apple.com/kb/HT3438
Mailing List, Third Party Advisory vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31358
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/41748
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-632-1
Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1019823
Issue Tracking, Vendor Advisory x_refsource_confirm
http://bugs.python.org/issue2586
Broken Link x_refsource_confirm
https://issues.rpath.com/browse/RPL-2444
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/507985/100/0/threaded
Exploit, Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3802
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31365
Third Party Advisory x_refsource_confirm
http://support.avaya.com/css/P8/documents/100074697
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31255
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/490690/100/0/threaded
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2008/dsa-1620
Permissions Required vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/3316
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29889

Scores

EPSS 0.2262
EPSS Percentile 97.4%

Details

CWE
CWE-681
Status published
Products (6)
canonical/ubuntu_linux 6.06
canonical/ubuntu_linux 7.04
canonical/ubuntu_linux 7.10
canonical/ubuntu_linux 8.04
debian/debian_linux 4.0
python/python 2.4.0 - 2.4.6
Published Apr 10, 2008
Tracked Since Feb 18, 2026