Every CVESearch/Get API key

CVE-2007-2052

Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2...

5.0 MediumPublic exploit

Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.

Exploit likelihood

14.1%Down 1.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used5.0

Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.

Record
CVE-2007-2052
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-193
Updated
2026-11-02
CVE ListNo score

Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.

Record
CVE-2007-2052
Updated
2026-11-02
EUVDEUVD-2007-2047No score

Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.

Record
EUVD-2007-2047
Updated
2026-11-03
GitHub AdvisoriesGHSA-7hcx-rxp8-j55gNo score

Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2...

Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.

Record
GHSA-7hcx-rxp8-j55g
Weakness
CWE-193
Updated
2026-11-02
OSVRHSA-2008:02649.1

Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update

Record
RHSA-2008:0264
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-13
OSVRHSA-2008:05259.1

Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update

Record
RHSA-2008:0525
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-13
OSVRHSA-2008:06299.1

Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update

Record
RHSA-2008:0629
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-13
OSVopenSUSE-SU-2024:11202-1No score

python-2.7.18-8.1 on GA media

These are all security issues fixed in the python-2.7.18-8.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11202-1
Updated
2026-11-02
OSVSUSE-SU-2020:0234-1No score

Security update for python

This update for python fixes the following issues:

Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).

Record
SUSE-SU-2020:0234-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
python2.4
Debian:4.0
From an advisory covering 5 CVEs
before 2.4.4-3+etch1, plus listed versions
2.4.4-3
2.4.4-3+etch1
python2.5
Debian:4.0
From an advisory covering 5 CVEs
before 2.5-5+etch1, plus listed versions
2.5-5
2.5-5+etch1
python
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python-debuginfo
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python-devel
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python-tools
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
tkinter
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python-debuginfo
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python-devel
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
Show 85 moreShow less
Affected packages
PackageAffectedFixed
python-tools
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
tkinter
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python-debuginfo
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python-devel
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python-tools
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
tkinter
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python-debuginfo
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python-devel
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python-tools
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
tkinter
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
before 0:2.2.3-6.8
0:2.2.3-6.8
python
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-docs
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-tools
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
tkinter
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-docs
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-tools
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
tkinter
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-docs
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-tools
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
tkinter
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-docs
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python-tools
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
tkinter
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
before 0:2.3.4-14.4.el4_6.1
0:2.3.4-14.4.el4_6.1
python
Red Hat:enterprise_linux:2.1::as
From an advisory covering 2 CVEs
before 0:1.5.2-43.72.2
0:1.5.2-43.72.2
python-devel
Red Hat:enterprise_linux:2.1::as
From an advisory covering 2 CVEs
before 0:1.5.2-43.72.2
0:1.5.2-43.72.2
python-docs
Red Hat:enterprise_linux:2.1::as
From an advisory covering 2 CVEs
before 0:1.5.2-43.72.2
0:1.5.2-43.72.2
python-tools
Red Hat:enterprise_linux:2.1::as
From an advisory covering 2 CVEs
before 0:1.5.2-43.72.2
0:1.5.2-43.72.2
tkinter
Red Hat:enterprise_linux:2.1::as
From an advisory covering 2 CVEs
before 0:1.5.2-43.72.2
0:1.5.2-43.72.2
python
Red Hat:enterprise_linux:2.1::aw
From an advisory covering 2 CVEs
before 0:1.5.2-43.72.2
0:1.5.2-43.72.2
python-devel
Red Hat:enterprise_linux:2.1::aw
From an advisory covering 2 CVEs
before 0:1.5.2-43.72.2
0:1.5.2-43.72.2
python-docs
Red Hat:enterprise_linux:2.1::aw
From an advisory covering 2 CVEs
before 0:1.5.2-43.72.2
0:1.5.2-43.72.2
python-tools
Red Hat:enterprise_linux:2.1::aw
From an advisory covering 2 CVEs
before 0:1.5.2-43.72.2
0:1.5.2-43.72.2
tkinter
Red Hat:enterprise_linux:2.1::aw
From an advisory covering 2 CVEs
before 0:1.5.2-43.72.2
0:1.5.2-43.72.2
python
Red Hat:enterprise_linux:2.1::es
From an advisory covering 2 CVEs
before 0:1.5.2-43.72.2
0:1.5.2-43.72.2
python-devel
Red Hat:enterprise_linux:2.1::es
From an advisory covering 2 CVEs
before 0:1.5.2-43.72.2
0:1.5.2-43.72.2
python-docs
Red Hat:enterprise_linux:2.1::es
From an advisory covering 2 CVEs
before 0:1.5.2-43.72.2
0:1.5.2-43.72.2
python-tools
Red Hat:enterprise_linux:2.1::es
From an advisory covering 2 CVEs
before 0:1.5.2-43.72.2
0:1.5.2-43.72.2
tkinter
Red Hat:enterprise_linux:2.1::es
From an advisory covering 2 CVEs
before 0:1.5.2-43.72.2
0:1.5.2-43.72.2
python
Red Hat:enterprise_linux:2.1::ws
From an advisory covering 2 CVEs
before 0:1.5.2-43.72.2
0:1.5.2-43.72.2
python-devel
Red Hat:enterprise_linux:2.1::ws
From an advisory covering 2 CVEs
before 0:1.5.2-43.72.2
0:1.5.2-43.72.2
python-docs
Red Hat:enterprise_linux:2.1::ws
From an advisory covering 2 CVEs
before 0:1.5.2-43.72.2
0:1.5.2-43.72.2
python-tools
Red Hat:enterprise_linux:2.1::ws
From an advisory covering 2 CVEs
before 0:1.5.2-43.72.2
0:1.5.2-43.72.2
tkinter
Red Hat:enterprise_linux:2.1::ws
From an advisory covering 2 CVEs
before 0:1.5.2-43.72.2
0:1.5.2-43.72.2
rhn-solaris-bootstrap
Red Hat:network_satellite:5.0:el4
From an advisory covering 12 CVEs
before 0:5.0.2-3
0:5.0.2-3
rhn_solaris_bootstrap_5_0_2_3
Red Hat:network_satellite:5.0:el4
From an advisory covering 12 CVEs
before 0:1-0
0:1-0
rhn-solaris-bootstrap
Red Hat:network_satellite:4.2::el3
From an advisory covering 12 CVEs
before 0:5.0.2-3
0:5.0.2-3
rhn_solaris_bootstrap_5_0_2_3
Red Hat:network_satellite:4.2::el3
From an advisory covering 12 CVEs
before 0:1-0
0:1-0
rhn-solaris-bootstrap
Red Hat:network_satellite:4.2::el4
From an advisory covering 12 CVEs
before 0:5.0.2-3
0:5.0.2-3
rhn_solaris_bootstrap_5_0_2_3
Red Hat:network_satellite:4.2::el4
From an advisory covering 12 CVEs
before 0:1-0
0:1-0
rhn-solaris-bootstrap
Red Hat:network_satellite:5.1::el4
From an advisory covering 12 CVEs
before 0:5.1.1-3
0:5.1.1-3
rhn_solaris_bootstrap_5_1_1_3
Red Hat:network_satellite:5.1::el4
From an advisory covering 12 CVEs
before 0:1-0
0:1-0
python
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python
Red Hat:enterprise_linux:5::client
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-tools
Red Hat:enterprise_linux:5::client
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
tkinter
Red Hat:enterprise_linux:5::client
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python
Red Hat:enterprise_linux:5::server
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-tools
Red Hat:enterprise_linux:5::server
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
tkinter
Red Hat:enterprise_linux:5::server
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 37 CVEs
before 2.7.17-7.32.2
2.7.17-7.32.2
python-base
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 37 CVEs
before 2.7.17-7.32.1
2.7.17-7.32.1
python
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 37 CVEs
before 2.7.17-7.32.2
2.7.17-7.32.2
python-base
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 37 CVEs
before 2.7.17-7.32.1
2.7.17-7.32.1
python
SUSE:Linux Enterprise Module for Desktop Applications 15
From an advisory covering 37 CVEs
before 2.7.17-7.32.2
2.7.17-7.32.2
python
SUSE:Linux Enterprise Module for Desktop Applications 15 SP1
From an advisory covering 37 CVEs
before 2.7.17-7.32.2
2.7.17-7.32.2
python
SUSE:Linux Enterprise Module for Python 2 15 SP1
From an advisory covering 37 CVEs
before 2.7.17-7.32.2
2.7.17-7.32.2
python-base
SUSE:Linux Enterprise Module for Python 2 15 SP1
From an advisory covering 37 CVEs
before 2.7.17-7.32.1
2.7.17-7.32.1
python
openSUSE:Tumbleweed
From an advisory covering 40 CVEs
before 2.7.18-8.1
2.7.18-8.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBPython 2.5 - 'PyLocale_strxfrm' Remote Information Leak2007-05-08

History

History
RecordedChangedSources
referencesOSV
affected, facts
aliasesEUVD
affected, aliases, exploits, facts, references, titleExploit-DB, GitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-2052 is a medium vulnerability (CVSS 5.0) in Python, published April 16, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 14.1%, the 96th percentile. No source names a fixed version.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 265 references. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open