VYPR

Activepython

by Activestate

CVEs (2)

  • CVE-2012-5379HigOct 11, 2012
    risk 0.51cvss 7.3epss 0.01

    Untrusted search path vulnerability in the installation functionality in ActivePython 3.2.2.3, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan horse DLL in the C:\Python27 or C:\Python27\Scripts directory, which may be added…

  • CVE-2002-0131Mar 25, 2002
    risk 0.00cvss epss 0.04

    ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a script from reading files from the client's filesystem, which allows remote attackers to read arbitrary files via a malicious web page containing Python script.