| Package | Affected versions | Patched versions |
|---|---|---|
| python | = 3.7.0≥ 3.2.0, < 3.4.9≥ 3.5.0, < 3.5.6≥ 3.6.0, < 3.6.5 | 3.4.93.5.63.6.5 |
Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates a symlink with an attacker controlled name or location. This vulnerability appears to have been fixed in 3.7.0 and 3.6.5.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free