CVE-2012-5379

ActivePython version 3.2.2.3 is vulnerable to an untrusted search path issue when installed in the *C:* directory. The vulnerability allows local users to escalate privileges to SYSTEM by placing a Trojan horse DLL (e.g., wlbsctrl.dll ) in directories such as C:\Python27 or C:\Python27\Scripts . ...

CVE-2002-0131

CVE-2002-0131 : The ActivePython ActiveX control for Python in the AXScript package, used in Internet Explorer, can be exploited to read arbitrary files from the client’s filesystem via a malicious web page containing Python script. The root cause is that the control does not prevent script from ...