[SECURITY] [DSA 2883-1] chromium-browser security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2883-1 [email protected] http://www.debian.org/security/ Michael Gilbert March 23, 2014 http://www.debian.org/security/faq -...

Google Chrome Multiple Vulnerabilities-02 (Mar 2014) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome Multiple Vulnerabilities-02 (Mar 2014) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2014-1700

The CVE-2014-1700 issue is a Use-After-Free in Blink’s SpeechSynthesis.cpp used by Google Chrome prior to 33.0.1750.149, allowing a remote attacker to cause a Denial of Service or possibly other impact through improper handling of an utterance data structure. Affected product classes include Chro...

FreeBSD : www/chromium --multiple vulnerabilities (24cefa4b-a940-11e3-91f2-00262d5ed8ee)

Google Chrome Releases reports : 7 vulnerabilities fixed in this release, including : - 344881 High CVE-2014-1700: Use-after-free in speech. Credit to Chamal de Silva. - 342618 High CVE-2014-1701: UXSS in events. Credit to aidanhs. - 333058 High CVE-2014-1702: Use-after-free in web database. Cred...

Google Chrome < 33.0.1750.149 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is a version prior to 33.0.1750.149. It is, therefore, affected by the following vulnerabilities : - Use-after-free errors exist related to 'speech' and 'web database' processing. CVE-2014-1700, CVE-2014-1702 - An input validation error...

Stable Channel Update

The Stable Channel has been updated to 33.0.1750.149 for Windows, Mac, and Linux. This release also contains a Flash Player update, to version 12.0.0.77. Security Fixes and Rewards This update includes 7 security fixes. Below, we highlight fixes that were either contributed by external researcher...

CVE-2013-1700

CVE-2013-1700 affects Mozilla Firefox on Windows, where the Mozilla Maintenance Service fails to handle inability to launch the Mozilla Updater executable. This enables local privilege escalation via placing a Trojan horse executable at an arbitrary location. Affected component: Mozilla Maintenan...

Mozilla Firefox Multiple Vulnerabilities - June 13 (Windows)

The host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmozillafirefoxmultvulnjun13win.nasl 6086 2017-05-09 09:03:30Z teissa $ Mozilla Firefox Multiple Vulnerabilities - June 13 Windows Authors: Arun Kallavi Copyright: Copyright c...

Mozilla Firefox Multiple Vulnerabilities (Jun 2013) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

HP ProCurve 1700 series switches vulnerable to cross-site request forgery

Overview ProCurve 1700 series switches provided by Hewlett-Packard contain a cross-site request forgery vulnerability. Darren Willis of Fourteenforty Research Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

[security bulletin] HPSBPV02855 SSRT100512 rev.1 - HP ProCurve 1700-8&#40;J9079A&#41; and 1700-24&#40;J9080A&#41; Switches, Cross Site Request Forgery &#40;CSRF&#41;

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03699981 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03699981 Version: 1 HPSBPV02855...

CVE-2012-5216

Cross-site request forgery CSRF vulnerability on HP ProCurve 1700-8 aka J9079A switches with software before VA.02.09 and 1700-24 aka J9080A switches with software before VB.02.09 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2013-1783

Name of the Vulnerable Software and Affected Versions HP ProCurve 1700-8 aka J9079A versions before VA.02.09 HP ProCurve 1700-24 aka J9080A versions before VB.02.09 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of victims via unknown...

CVE-2012-5216: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability on HP ProCurve 1700-8 aka J9079A switches with software before VA.02.09 and 1700-24 aka J9080A switches with software before VB.02.09 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Ubuntu: Security Advisory (USN-1700-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-1700

Technical details for CVE-2012-1700 are not publicly provided in the supplied documents. Monitor for updates from Oracle/NVD; the connected items reference this CVE but do not reveal affected components, versions, impact, or remediation.

Novell iPrint Client 'printer-url' Multiple BOF Vulnerabilities - Windows

Novell iPrint Client is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ZDI-11-173: Novell iPrint nipplib.dll profile-time Remote Code Execution Vulnerability

ZDI-11-173: Novell iPrint nipplib.dll profile-time Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-173 June 6, 2011 -- CVE ID: CVE-2011-1700 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Novell -- Affected Products: Novell iPrint --...

CVE-2011-1700

Novell iPrint Client (nipplib.dll) has a heap-based buffer overflow in the profile-time parameter of the printer-url, affecting versions before 5.64. This vulnerability (CVE-2011-1700) allows remote code execution and is triggered by processing a crafted printer-url profile-time value, with explo...