Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Jaybosamiya

#26874of 56,330
9.8Total CVSS
Vulnerabilities · 1
PT-2017-3760
9.8
2017-11-17
Python · Cpython · CVE-2017-1000158
Name of the Vulnerable Software and Affected Versions: CPython versions up to 2.7.13 Description: The issue is related to an integer overflow in the `PyString DecodeEscape` function in `stringobject.c`, which can lead to a heap-based buffer overflow and potentially allow for arbitrary code execution. This can be exploited by a remote attacker. Recommendations: For versions up to 2.7.13, update to a version that includes a fix for the integer overflow in the `PyString DecodeEscape` function to prevent heap-based buffer overflow and possible arbitrary code execution. As a temporary workaround, consider restricting the use of the `PyString DecodeEscape` function until a patch is available.