CVE-2016-5636 PoC — Python 输入验证错误漏洞

Source

https://github.com/insuyun/CVE-2016-5636

Associated Vulnerability

Title: Python 输入验证错误漏洞 (CVE-2016-5636)
Description:Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.

Description

CVE-2016-5636

Readme

# CVE-2016-5636

PoC for [CVE-2016-5636](https://bugs.python.org/issue26171), which is a heap overflow in Python 3.6. This repository
includes:
* crash-with-zip : crash PoC by reading untrusted zip file
* google-web-engine : crash PoC working on google web engine
* spawn-shell : a local exploit for spawning shell

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →