Python · Cpython · CVE-2017-1000158
Name of the Vulnerable Software and Affected Versions:
CPython versions up to 2.7.13
Description:
The issue is related to an integer overflow in the `PyString DecodeEscape` function in `stringobject.c`, which can lead to a heap-based buffer overflow and potentially allow for arbitrary code execution. This can be exploited by a remote attacker.
Recommendations:
For versions up to 2.7.13, update to a version that includes a fix for the integer overflow in the `PyString DecodeEscape` function to prevent heap-based buffer overflow and possible arbitrary code execution. As a temporary workaround, consider restricting the use of the `PyString DecodeEscape` function until a patch is available.