Python 2.7 strop.replace() Integer Overflow
Posted by deepcore on November 3, 2015 – 1:53 pm
Python version 2.7 strop.replace() method suffers from an integer overflow that can be exploited to write outside the bounds of the string buffer and potentially achieve code execution. The issue can be triggered by performing a large substitution that overflows the arithmetic used in mymemreplace() to calculate the size of the new string.
Post a reply
You must be logged in to post a comment.