NVD

Id
26755  
Name
CVE-2015-5652  
Description
Untrusted search path vulnerability in python.exe in Python through 3.5.0 on Windows allows local users to gain privileges via a Trojan horse readline.pyd file in the current working directory. NOTE: the vendor says "It was determined that this is a longtime behavior of Python that cannot really be altered at this point."  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-10-05  
Modified Date
2016-11-28  
Seq
2015-5652  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
141599 26755 CVE-2015-5652 http://jvn.jp/en/jp/JVN49503705/995204/index.html  View
141600 26755 CVE-2015-5652 JVN#49503705  View
141601 26755 CVE-2015-5652 JVNDB-2015-000141  View
141602 26755 CVE-2015-5652 76929  View
141603 26755 CVE-2015-5652 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5626 JVNDB-2015-000141 Windows 版 Python における任意の DLL 読み込みに関する脆弱性 Windows 版 Python は、実行の際に特定の DLL を読み込みます。Windows 版 Python には、DLL を読み込む際の検索パスに問題があり、カレントディレクトリ内にある readline.pyd という名の意図しない DLL を読み込んでしまう脆弱性が存在します。 CVE-2015-5652 82877 CVE-2015-5652 26755 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000141.html 2015-10-01 2015-10-08 View