CVE-2015-5652 Untrusted search path vulnerability in python.exe in Python through 3.5.0 on Windows allows local users to gain privileges via a Trojan horse readline.pyd file in the current working directory. NOTE:....
HighCVSS 7.2
EPSS 0.59%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in python.exe in Python through 3.5.0 on Windows allows local users to gain privileges via a Trojan horse readline.pyd file in the current working directory. NOTE: the vendor says "It was determined that this is a longtime behavior of Python that cannot really be altered at this point."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| python | <= 3.5.0 | No fix listed |
References
- jvn.jp vendor-advisory
- JVN#49503705 third-party-advisory vendor-advisory
- JVNDB-2015-000141 third-party-advisory vendor-advisory
- 76929 vdb-entry
- h20566.www2.hpe.com