Description

Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates a symlink with an attacker controlled name or location. This vulnerability appears to have been fixed in 3.7.0 and 3.6.5.

Remediation

References

CVE-2018-1000117

Related Vulnerabilities

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-1619)

WordPress Plugin Pinterest Automatic Pin Security Bypass (4.14.3)

WordPress Plugin Elementor Website Builder Cross-Site Scripting (2.9.9)

Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-43425)

WordPress Plugin Advanced AJAX Page Loader Cross-Site Request Forgery (2.7.7)

Severity

Medium

Classification

CVE-2018-1000117 CWE-119 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities