Vulnerability Details CVE-2007-1657
Stack-based buffer overflow in the file_compress function in minigzip (Modules/zlib) in Python 2.5 allows context-dependent attackers to execute arbitrary code via a long file argument.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.045
EPSS Ranking 88.7%
CVSS Severity
CVSS v2 Score 7.5
References
- http://attrition.org/pipermail/vim/2007-March/001430.html
- http://osvdb.org/43550
- http://www.securityfocus.com/archive/1/462799/100/0/threaded
- http://www.securityfocus.com/bid/22964
- http://attrition.org/pipermail/vim/2007-March/001430.html
- http://osvdb.org/43550
- http://www.securityfocus.com/archive/1/462799/100/0/threaded
- http://www.securityfocus.com/bid/22964
Products affected by CVE-2007-1657
-
cpe:2.3:a:python_software_foundation:python:2.5