CPython up to 3.13.x on Windows File Extension untrusted search path

Summaryinfo

A vulnerability categorized as problematic has been discovered in CPython up to 3.13.x on Windows. This impacts an unknown function of the component File Extension Handler. Such manipulation leads to untrusted search path. This vulnerability is listed as CVE-2024-3220. The attack must be carried out locally. There is no available exploit. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in CPython up to 3.13.x on Windows and classified as critical. Affected by this issue is an unknown functionality of the component File Extension Handler. The manipulation with an unknown input leads to a untrusted search path vulnerability. Using CWE to declare the problem leads to CWE-426. The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control. Impacted is confidentiality, integrity, and availability. CVE summarizes:

There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the incorrect file type. This defect is caused by the default locations of Linux and macOS platforms (such as “/etc/mime.types”) also being used on Windows, where they are user-writable locations (“C:\etc\mime.types”). To work-around this issue a user can call mimetypes.init() with an empty list (“[]”) on Windows platforms to avoid using the default list of known file locations.

The advisory is available at mail.python.org. This vulnerability is handled as CVE-2024-3220 since 04/02/2024. The exploitation is known to be difficult. Local access is required to approach this attack. The technical details are unknown and an exploit is not available. This vulnerability is assigned to T1574 by the MITRE ATT&CK project.

Upgrading to version 3.14.0 eliminates this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Programming Language Software

Name

• CPython

Version

• 3.0
• 3.1
• 3.2
• 3.3
• 3.4
• 3.5
• 3.6
• 3.7
• 3.8
• 3.9
• 3.10
• 3.11
• 3.12
• 3.13

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion