Vulnerability in Microsoft Windows
CVE-2015-5652
Untrusted search path vulnerability in python.exe in Python through 3.5.0 on Windows allows local users to gain privileges via a Trojan horse readline.pyd file in the current working directory. NOTE: the vendor says "It was determined that this is a longtime behavior of Python that cannot really be altered at this point."
EPSS: 0.006 (45.7th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows
- Python
- N/a — versions n/a
References
- vultures@jpcert.or.jp (x_refsource_JVNDB, Vendor Advisory, third-party-advisory)
- vultures@jpcert.or.jp (vdb-entry, x_refsource_BID)
- vultures@jpcert.or.jp (x_refsource_CONFIRM)
- vultures@jpcert.or.jp (x_refsource_MISC, Vendor Advisory)
- vultures@jpcert.or.jp (x_refsource_JVN, Vendor Advisory, third-party-advisory)