Servers and applications
CVE-2019-13404
The MSI installer for Python through 2.7.16 on Windows defaults to the C:\Python27 directory, which makes it easier for local users to deploy Trojan horse code. (This also affects old 3.x releases before 3.5.) NOTE: the vendor's position is that it is the user's responsibility to ensure C:\Python27 access control or choose a different directory, because backwards compatibility requires that…
- Severity
- High 7.8
- Published
- 8 Jul 2019
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 3.5.0
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
PythonServers and applications · cpe:a:python:python |
|