Security update for Chromium (important)

Chromium was updated to 50.0.2661.102 to fix four vulnerabilities boo979859: - CVE-2016-1667: Same origin bypass in DOM - CVE-2016-1668: Same origin bypass in Blink V8 bindings - CVE-2016-1669: Buffer overflow in V8 - CVE-2016-1670: Race condition in loader...

CVE-2016-1669

The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impa...

CVE-2016-1669

The vulnerability CVE-2016-1669 affects Google V8’s Zone::New in zone.cc, with V8 versions before 5.0.71.47 used by Google Chrome older than 50.0.2661.102. A mis-timed expansion of memory allocations can allow a remote attacker to trigger a buffer overflow, causing denial of service and potential...

Important: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

UBUNTU-CVE-2016-1669

The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impa...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 5 security fixes in this release, including: 605766 High CVE-2016-1667: Same origin bypass in DOM. Credit to Mariusz Mlynski. 605910 High CVE-2016-1668: Same origin bypass in Blink V8 bindings. Credit to Mariusz Mlynski. 606115 High CVE-2016-1669: Buffer overflow i...

Directory traversal

Directory traversal vulnerability in index.php in phpMoneyBooks 1.0.4 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter, a different vulnerability than CVE-2012-1669. NOTE: the provenance of this information is unknown; the details are obtained solely from thi...

CVE-2012-6665

Directory traversal vulnerability in index.php in phpMoneyBooks 1.0.4 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter, a different vulnerability than CVE-2012-1669. NOTE: the provenance of this information is unknown; the details are obtained solely from thi...

CVE-2012-1669

Directory traversal vulnerability in index.php in phpMoneyBooks before 1.0.3 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the module parameter...

CVE-2012-1669

CVE-2012-1669 affects phpMoneyBooks via an LFI/Directory Traversal in index.php, where the module parameter enables local file inclusion. Exploitation relies on ../ path traversal (and a null-byte attack noted in PoC docs) to include arbitrary local files. Affected versions are before 1.0.3; reme...

RedHat Update for qemu-kvm RHSA-2014:1669-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for libcacard CESA-2014:1669 centos7

Check the version of libcacard SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882065";...

openSUSE Security Update : xulrunner (openSUSE-SU-2013:0929-1)

Mozilla xulrunner was updated to 17.0.6esr bnc819204 - MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards - MFSA 2013-42/CVE-2013-1670 bmo853709 Privileged access for content level constructor - MFSA 2013-46/CVE-2013-1674 bmo860971 Use-after-free with video and onresize...

openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2013:0894-1)

MozillaThunderbird was updated to security update Thunderbird 17.0.6 bnc819204 : - MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards - MFSA 2013-42/CVE-2013-1670 bmo853709 Privileged access for content level constructor - MFSA 2013-46/CVE-2013-1674 bmo860971...

SuSE Update for xulrunner openSUSE-SU-2013:0929-1 (xulrunner)

Check for the Version of xulrunner OpenVAS Vulnerability Test $Id: gbsuse201309291.nasl 8045 2017-12-08 08:39:37Z santu $ SuSE Update for xulrunner openSUSE-SU-2013:0929-1 xulrunner Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This...

SuSE Update for MozillaThunderbird openSUSE-SU-2013:0894-1 (MozillaThunderbird)

Check for the Version of MozillaThunderbird OpenVAS Vulnerability Test $Id: gbsuse201308941.nasl 8494 2018-01-23 06:57:55Z teissa $ SuSE Update for MozillaThunderbird openSUSE-SU-2013:0894-1 MozillaThunderbird Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH,...

SuSE Update for MozillaFirefox openSUSE-SU-2013:0946-1 (MozillaFirefox)

Check for the Version of MozillaFirefox OpenVAS Vulnerability Test $Id: gbsuse201309461.nasl 8494 2018-01-23 06:57:55Z teissa $ SuSE Update for MozillaFirefox openSUSE-SU-2013:0946-1 MozillaFirefox Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH,...

openSUSE: Security Advisory for xulrunner (openSUSE-SU-2013:0929-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for MozillaThunderbird (openSUSE-SU-2013:0894-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2013:0946-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...