CVE-2021-32559

Katalog CVE

CVSS 6.5 · Medium EPSS 1,7%

Kerentanan Integer Overflow or Wraparound pada mhammond pywin32. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

An integer overflow exists in pywin32 prior to version b301 when adding an access control entry (ACE) to an access control list (ACL) that would cause the size to be greater than 65535 bytes. An attacker who successfully exploited this vulnerability could crash the vulnerable process.

Rincian

Terbit di NVD

6 Juli 2021

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

1,7% peluang dieksploitasi; lebih tinggi dari 77,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/mhammond/pywin32/issues/1700 patch · advisory pihak ketiga
• https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0017/FEYE-2021-0017.md advisory pihak ketiga
• https://github.com/mhammond/pywin32/pull/1701 advisory pihak ketiga
• https://github.com/mhammond/pywin32/releases release notes · advisory pihak ketiga