CVE-2018-1000117-Exploit

CVE-2018-1000117 Python Software Foundation의 CPythonWindows용 3.23.6.4 버전은 Windows의 os.symlink 함수에 버퍼 오버플로우 취약점을 포함하며, 이로 인해 임의 코드 실행 및 권한 상승이 발생할 수 있습니다. 이 공격은 공격자가 제어하는 이름이나 위치로 심볼릭 링크를 생성하는 파이썬 스크립트를 통해 악용될 수 있는 것으로 보입니다. 이 취약점은 3.7.0 및 3.6.5에서 수정된 것으로 보입니다. 취약한 버전 root@kitploit: Python 2.7...

CVE-2026-55569

aqua (aquaproj/aqua), a declarative command-line version manager written in Go, contains a symlink traversal flaw in pkg/unarchive/archives.go (HandleFile). The handler calls os.Symlink with an unvalidated LinkTarget and does not jail the target to the extraction destination. A subsequent regular...

EUVD-2018-1844

Malware in sbrugna...

Python Software Foundation CPython on Windows Buffer Overflow Vulnerability

Python Software Foundation CPython on Windows is the Python Software Foundation's suite of Windows-based, open-source, object-oriented programming languages that are extensible, support modules and packages, and support multiple platforms.CPython also known as Python is a Python interpreter...

Buffer overflow

Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates...

CVE-2018-1000117

CVE-2018-1000117 affects CPython on Windows: buffer overflow in os.symlink() from Python 3.2–3.6.4 can enable arbitrary code execution with privilege escalation; exploit via attacker-controlled symlink. Fixed in Python 3.6.5 and 3.7.0. Upgrade to these or later to remediate.