CVE-2018-1000117
MEDIUM 6.7EPSS 1.0%
Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates a symlink with an attacker controlled name or location. This vulnerability appears to have been fixed in 3.7.0 and 3.6.5.
- CVSS v3.1 NVD
- 6.7 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 1.04% chance of exploitation in the next 30 days, 63rd percentile
- Published
- 2018-03-07
- Updated
- 2024-09-17
Proof-of-concept exploits (1)
- u0pattern/CVE-2018-1000117-Exploit3★ · 2018-06-05