CVE-2016-5636
CriticalSummary
Integer overflow in the get_data function in zipimport.c in CPython before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.
Risk Assessment
An attacker may exploit this vulnerability to execute malicious code or destabilize the system, potentially leading to serious security implications for the application.
Recommendation
It is recommended to update CPython to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.
Original NVD description (English source)
Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.