CVE-2018-1000117-Exploit

CVE-2018-1000117 La versión de CPython de Python Software Foundation, desde 3.2 hasta 3.6.4 en Windows, contiene una vulnerabilidad de desbordamiento de búfer en la función os.symlink en Windows que puede resultar en ejecución de código arbitrario, probablemente escalada de privilegios. Este ataq...

CVE-2026-55569

aqua (aquaproj/aqua), a declarative command-line version manager written in Go, contains a symlink traversal flaw in pkg/unarchive/archives.go (HandleFile). The handler calls os.Symlink with an unvalidated LinkTarget and does not jail the target to the extraction destination. A subsequent regular...

EUVD-2018-1844

Malware in sbrugna...

Python Software Foundation CPython on Windows Buffer Overflow Vulnerability

Python Software Foundation CPython on Windows is the Python Software Foundation's suite of Windows-based, open-source, object-oriented programming languages that are extensible, support modules and packages, and support multiple platforms.CPython also known as Python is a Python interpreter...

Buffer overflow

Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates...

CVE-2018-1000117

CVE-2018-1000117 affects CPython on Windows: buffer overflow in os.symlink() from Python 3.2–3.6.4 can enable arbitrary code execution with privilege escalation; exploit via attacker-controlled symlink. Fixed in Python 3.6.5 and 3.7.0. Upgrade to these or later to remediate.