Total vulnerabilities in the database
Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates a symlink with an attacker controlled name or location. This vulnerability appears to have been fixed in 3.7.0 and 3.6.5.
| Software | From | Fixed in |
|---|---|---|
| python / python | 3.2.0 | 3.4.9 |
| python / python | 3.5.0 | 3.5.6 |
| python / python | 3.6.0 | 3.6.5 |
| python / python | 3.7.0-beta1 | 3.7.0-beta1.x |
| python / python | 3.7.0-beta2 | 3.7.0-beta2.x |
| python / python | 3.7.0-beta3 | 3.7.0-beta3.x |
| python / python | 3.7.0-beta4 | 3.7.0-beta4.x |
| python / python | 3.7.0-beta5 | 3.7.0-beta5.x |