CVE ID:	CVE-2016-5636
Description:	Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.
Test IDs:	1.3.6.1.4.1.25623.1.0.808441   1.3.6.1.4.1.25623.1.0.808453   1.3.6.1.4.1.25623.1.0.808452   1.3.6.1.4.1.25623.1.0.808437   1.3.6.1.4.1.25623.1.0.808903   1.3.6.1.4.1.25623.1.0.808966   1.3.6.1.4.1.25623.1.0.808717   1.3.6.1.4.1.25623.1.0.808715   1.3.6.1.4.1.25623.1.0.871711   1.3.6.1.4.1.25623.1.0.891663   1.3.6.1.4.1.25623.1.1.2.2017.1003
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-5636 BugTraq ID: 91247 http://www.securityfocus.com/bid/91247 https://security.gentoo.org/glsa/201701-18 https://lists.debian.org/debian-lts-announce/2019/02/msg00011.html http://www.openwall.com/lists/oss-security/2016/06/15/15 http://www.openwall.com/lists/oss-security/2016/06/16/1 RedHat Security Advisories: RHSA-2016:2586 http://rhn.redhat.com/errata/RHSA-2016-2586.html http://www.securitytracker.com/id/1038138 SuSE Security Announcement: openSUSE-SU-2020:0086 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html