PT-2019-6987 · Yingzhi · Yingzhi Python Programming Language

Larry W. Cashdollar + 1 · Published 2019-02-15 · Updated 2019-02-21 · CVE-2013-5654

Positive Technologies (AI Summary)

CVSS v2.0

9.4

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions YingZhi Python Programming Language version 1.9

Description The issue allows for arbitrary anonymous uploads to the phone's storage.

Recommendations For version 1.9, consider restricting access to the upload functionality until a patch is available.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2013-5654

Affected Products

Yingzhi Python Programming Language

References · 3

• 🔥 http://vapidlabs.com/advisory.php?v=94 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-5654 · Security Note
• http://iphoneappstorm.com/iphone-apps/utilities/com.yingzhi.python/yingzhipython.php?id=493505744 · Note