21 matches found
PYSEC-2026-1781 Picklescan has a missing detection when calling built-in python idlelib.debugobj.ObjectTreeItem
Summary Using idlelib.debugobj.ObjectTreeItem.SetText, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to idlelib.debugobj.ObjectTreeItem.SetText function in...
PT-2025-44764
Name of the Vulnerable Software and Affected Versions NetSurf version 3.11 Description NetSurf version 3.11 contains a Use After Free issue within the dom node set text content function. Recommendations At the moment, there is no information about a newer version that contains a fix for this...
CVE-2025-29699
NetSurf 3.11 is vulnerable to Use After Free in domnodesettextcontent function...
The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocation failure that is not properly handled, leading to a heap-based buffer overflow.
...
postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions
A flaw was found in org.postgresql. This issue allows the creation of a temporary file when using PreparedStatement.setTextint, InputStream and PreparedStatemet.setByteaint, InputStream. This could allow a user to create an unexpected file available to all users, which could end in unexpected...
SUSE CVE-2010-1196
Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value that triggers a...
SUSE CVE-2018-10194
The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...
SUSE CVE-2019-20352
In Netwide Assembler NASM 2.15rc0, a heap-based buffer over-read occurs via a crafted .asm file in settextfree when called from expandonesmacro in asm/preproc.c...
PgJDBC PreparedStatement Information Disclosure
The vulnerability in the implementation of PreparedStatement.setText or PreparedStatement.setBytea methods of the PgJDBC driver for connecting Java programs to PostgreSQL lies in the use of insecure temporary files. Exploiting this vulnerability could allow an attacker to disclose sensitive...
PT-2022-5790
Name of the Vulnerable Software and Affected Versions pgjdbc versions prior to 4.5.0 Description The issue is related to the implementation of the PreparedStatement.setText or PreparedStatement.setBytea methods in the PgJDBC driver, which can lead to the creation of temporary files that are...
NASM set_text_free Buffer Overflow
The vulnerability of the settextfree function in the Netwide Assembler NASM is related to the execution of operations outside the buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
PT-2020-1571
Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.15rc0 Description A heap-based buffer over-read issue occurs in the set text free function when called from expand one smacro in asm/preproc.c, potentially allowing an attacker to impact the confidentiality,...
Ghostscript set_text_distance Buffer Overflow DoS
The vulnerability of the settextdistance function in the pdfwrite component of the Ghostscrip software suite for document processing, conversion, and generation is related to an error that causes an attempt to output an infinite number of items. Exploiting this vulnerability could allow a malicio...
Ghostscript Arbitrary Code Execution Vulnerability
Artifex Ghostscript is the United States Artifex Software, Inc. of an open source PostScript a page description language used in the electronic industry and desktop publishing and programming languages parser, which can display Postscript files and print on non-Postscript printer. pdfwrite is one...
ALPINE-CVE-2018-10194
The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...
PT-2018-1827
Name of the Vulnerable Software and Affected Versions: Artifex Ghostscript versions through 9.22 Description: The issue is related to the set text distance function in the pdfwrite component, which does not prevent overflows in text-positioning calculation. This allows remote attackers to cause a...
UBUNTU-CVE-2018-10194
The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...
PT-2016-3254
Name of the Vulnerable Software and Affected Versions libpng versions 0.71 through 1.0.66 libpng versions 1.2.x through 1.2.56 libpng versions 1.4.x through 1.4.19 libpng versions 1.5.x through 1.5.27 libpng versions 1.6.x through 1.6.26 Description The issue is related to a null pointer...
PT-2012-1090
Name of the Vulnerable Software and Affected Versions libpng versions 1.0.x through 1.0.58 libpng versions 1.2.x through 1.2.48 libpng versions 1.4.x through 1.4.10 libpng versions 1.5.x through 1.5.9 Description The issue is related to the png set text 2 function in pngset.c, which allows remote...
nsGenericDOMDataNode:: SetTextInternal
Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value that triggers a...