CVE-2007-2052

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 13.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-04-16 · updated 2026-06-16
Weakness: CWE-193

Description

Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.

Affected products

Python: 2.4.0, 2.5.0

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=416934
http://lists.vmware.com/pipermail/security-announce/2008/000005.html
http://secunia.com/advisories/25190
http://secunia.com/advisories/25217
http://secunia.com/advisories/25233
http://secunia.com/advisories/25353
http://secunia.com/advisories/25787
http://secunia.com/advisories/28027
http://secunia.com/advisories/28050
http://secunia.com/advisories/29032
http://secunia.com/advisories/29303
http://secunia.com/advisories/29889

Get alerted when CVE-2007-2052 or the next vulnerability affects your stack