EIP-2026-116111
PRE-CVEPython 2.7 hotshot Module - 'pack_string' Heap Buffer Overflow (PoC)
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-116111. PoCs published by John Leitch.
AI-analyzed exploit summary This exploit demonstrates a heap buffer overflow in Python 2.7's hotshot module due to improper bounds checking in the pack_string function. The PoC triggers the vulnerability by passing an overly large string to the Profile.addinfo method, leading to memory corruption.
Description
Python 2.7 hotshot Module - 'pack_string' Heap Buffer Overflow (PoC)
Exploits (1)
This exploit demonstrates a heap buffer overflow in Python 2.7's hotshot module due to improper bounds checking in the pack_string function. The PoC triggers the vulnerability by passing an overly large string to the Profile.addinfo method, leading to memory corruption.