JVN#49503705: Python for Windows may insecurely load dynamic libraries

Python for Windows contains an issue with the DLL search path, which may lead to insecurely loading a DLL called readline.pyd.

Impact

Arbitray code may be executed with the privileges of python.exe.

Solution

Apply a workaround
Applying the following workaround will mitigate the effects of this issue

• Ensure that a file with the name “readline.pyd” is not in the current directory prior to executing python.exe

Products Affected

• Python for Windows