CVE-2016-5636: Buffer Overflow
Integer overflow in the getdata function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5636?
CVE-2016-5636 has a severity rating that can lead to a heap-based buffer overflow, potentially allowing remote attackers to affect the application.
How do I fix CVE-2016-5636?
To address CVE-2016-5636, upgrade to Python versions 2.7.12, 3.4.5, or 3.5.2 or later.
What versions of Python are affected by CVE-2016-5636?
CVE-2016-5636 affects Python versions prior to 2.7.12, 3.4.5, and 3.5.2.
Can CVE-2016-5636 be exploited remotely?
Yes, CVE-2016-5636 can be exploited by remote attackers through a negative data size value.
What is the impact of CVE-2016-5636?
The impact of CVE-2016-5636 includes potential arbitrary code execution and application instability due to a buffer overflow.