CVE-2013-1424

Buffer overflow vulnerability in matplotlib.This issue affects matplotlib: before upstream commit ba4016014cb4fb4927e36ce8ea429fed47dcb787...

dtwpy (0.1.0), pdistributionpy (0.2.0) +1 more potentially affected by CVE-2013-1424 via matplotlib (>=1.3.1, <=1.4.3)

matplotlib PYPI version =1.3.1, =1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on matplotlib and may be impacted: - dtwpy 0.1.0 - pdistributionpy 0.2.0 - riboplot 0.1.0 Source cves: CVE-2013-1424 Source advisory: SNYK:PYTHON-MATPLOTLIB-10556355...

CVE-2013-1424

Buffer overflow vulnerability in matplotlib.This issue affects matplotlib: before upstream commit ba4016014cb4fb4927e36ce8ea429fed47dcb787...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow. An attacker can execute arbitrary code by supplying specially crafted input that triggers a memory overwrite. Remediation Upgrade matplotlib to version 1.5.0 or higher. References - Debian Bug Report - GitHub Commit - R...

CVE-2013-1424

Buffer overflow vulnerability in matplotlib.This issue affects matplotlib: before upstream commit ba4016014cb4fb4927e36ce8ea429fed47dcb787...

CVE-2013-1424

Buffer overflow vulnerability in matplotlib.This issue affects matplotlib: before upstream commit ba4016014cb4fb4927e36ce8ea429fed47dcb787...

CVE-2013-1424: Buffer Copy without Checking Size of Input

Buffer overflow vulnerability in matplotlib.This issue affects matplotlib: before upstream commit ba4016014cb4fb4927e36ce8ea429fed47dcb787...

Matplotlib security vulnerabilities

matplotlib is a Python plotting library open-sourced by matplotlib. A security vulnerability exists in matplotlib that stems from a buffer overflow in a version prior to the upstream commit ba4016014cb4fb4927e36ce8ea429fed47dcb787...

MAL-2024-11630 Malicious code in matlibplot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b675638019d08df47348aa16973f4b46c50ffad23b83f5a125b19d30fd90825a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-11631 Malicious code in matplotlibp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6001b34babb94c9717d7cadd9cb86b4d5acb72b787b404c1adc5b4b33d17b8c1 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

OESA-2024-1742 python-pyinstaller security update

PyInstaller bundles a Python application and all its dependencies into a single package. The user can run the packaged app without installing a Python interpreter or any modules. Security Fixes: PyInstaller bundles a Python application and all its dependencies into a single package. A PyInstaller...

Local Privilege Escalation

pyinstaller is vulnerable to Local Privilege Escalation. The vulnerability exists due to insecure directories used in the library, allowing an attacker to delete files on the system if the applications contains either matplotlib or win32com, and the temporary directory is not locked to a specific...

CVE-2023-49797

PyInstaller bundles a Python application and all its dependencies into a single package. A PyInstaller built application, elevated as a privileged process, may be tricked by an unprivileged attacker into deleting files the unprivileged user does not otherwise have access to. A user is affected if...

PYSEC-2023-292

PyInstaller bundles a Python application and all its dependencies into a single package. A PyInstaller built application, elevated as a privileged process, may be tricked by an unprivileged attacker into deleting files the unprivileged user does not otherwise have access to. A user is affected if...

PYSEC-2023-292

PyInstaller bundles a Python application and all its dependencies into a single package. A PyInstaller built application, elevated as a privileged process, may be tricked by an unprivileged attacker into deleting files the unprivileged user does not otherwise have access to. A user is affected if...

CVE-2023-49797

PyInstaller bundles a Python application and all its dependencies into a single package. A PyInstaller built application, elevated as a privileged process, may be tricked by an unprivileged attacker into deleting files the unprivileged user does not otherwise have access to. A user is affected if...

GHSA-9W2P-RH8C-V9G5 Local Privilege Escalation in Windows

Impact A PyInstaller built application, elevated as a privileged process, may be tricked by an unprivileged attacker into deleting files the unprivileged user does not otherwise have access to. A user is affected if all the following are satisfied: The user runs an application containing either...

CVE-2023-49797: Creation of Temporary File in Directory with Insecure Permissions

PyInstaller bundles a Python application and all its dependencies into a single package. A PyInstaller built application, elevated as a privileged process, may be tricked by an unprivileged attacker into deleting files the unprivileged user does not otherwise have access to. A user is affected if...

PT-2023-31355 · Unknown +2 · Pyinstaller +3

Name of the Vulnerable Software and Affected Versions: PyInstaller versions prior to 5.13.1 Description: A PyInstaller built application, elevated as a privileged process, may be tricked by an unprivileged attacker into deleting files the unprivileged user does not otherwise have access to. This...

MAL-2023-1377 Malicious code in matplotlib-req (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd93a03dd511f9d7c410511963475b420e4509248f52573f9dbcb75147a43d8a The OpenSSF Package Analysis project identified 'matplotlib-req' @ 17.6.16 pypi as malicious. It is considered malicious because: - The package...