20527 matches found
[BSA-068] Security Update for freetype
I uploaded new packages for freetype which fixed the following security problems: CVE-2011-3439 FreeType allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font, a different vulnerability than CVE-2011-3256. CVE-2011-3256 FreeType before...
Security fix for the ALT Linux 6 package libpng version 1.2.48-alt1
March 23, 2012 Dmitry V. Levin 1.2.48-alt1 - Updated to 1.2.48 fixes CVE-2011-3045...
[SECURITY] [DSA 2439-1] libpng security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2439-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 22, 2012 http://www.debian.org/security/faq -...
AZL-41243 CVE-2011-3045 affecting package syslinux for versions less than 6.04-11
Integer signedness error in the pnginflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PNG file, a...
CVE-2011-3054
The WebUI privilege implementation in Google Chrome before 17.0.963.83 does not properly perform isolation, which allows remote attackers to bypass intended access restrictions via unspecified vectors...
CVE-2011-3053
Use-after-free vulnerability in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to block splitting...
CVE-2011-3045
CVE-2011-3045 describes an integer signedness error in libpng’s png_inflate (pngrutil.c) affecting libpng before 1.4.10beta01. The vulnerability, cited as used in Google Chrome before 17.0.963.83 and other products, can cause a denial of service (application crash) or potentially allow arbitrary ...
CVE-2011-3052
CVE-2011-3052 involves memory corruption in the WebGL canvas handling of Chromium/Chrome. The issue arises from the WebGL implementation not properly handling CANVAS elements, enabling a remote attacker to cause a denial of service (memory corruption) and potentially other unspecified impacts via...
CVE-2011-3054
The CVE-2011-3054 entry relates to Chromium/Chrome’s WebUI privilege isolation. OpenSUSE security update 0466-1 notes a Low impact fix: “Apply additional isolations to webui privileges,” indicating a refinement of WebUI isolation rather than a new exploit. The patch was part of an update path to ...
CVE-2011-3057
CVE-2011-3057 affects Google Chrome's V8 engine (Chromium) and is described as an invalid read in V8, with the initial entry noting a remote denial of service vector. Connected documents corroborate that this CVE is among a set of Chromium/V8 issues (e.g., CVEs 2011-3057 through 2011-3065) tracke...
CVE-2011-3055
CVE-2011-3055 affects Chromium/Chrome prior to versions adopting the OpenSUSE patch, where the browser’s native UI could prompt for an unpacked extension installation without user confirmation, enabling user-assisted remote execution via a crafted extension. Connected advisories confirm the issue...
CVE-2011-3056
Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."...
CVE-2011-3056
CVE-2011-3056 affects Google Chrome prior to 17.0.963.83, where a cross-origin policy bypass is possible via a vector involving a “magic iframe.” The underlying issue is a Same Origin Policy bypass in the browser’s handling of iframes, enabling partial confidentiality/integrity exposure. The publ...
CVE-2011-3051
CVE-2011-3051 describes a use-after-free in the CSS cross-fade handling in Google Chrome’s rendering path prior to version 17.0.963.83. The vulnerability could allow a remote attacker to cause a denial of service or potentially other impact via cross-fade related vectors. Affected software is Goo...
CVE-2011-3053
CVE-2011-3053 is a use-after-free in block splitting affecting Google Chrome up to 17.0.963.83 and related Chromium/WebKit components. Connected advisories document a fix path via security updates: openSUSE’s openSUSE-SU-2012:0466-1 for Chromium (addressing CVE-2011-3053 among others) and Ubuntu ...
CVE-2011-3055
Removed by vendor...
CVE-2011-3050
Removed by vendor...
CVE-2011-3053
Removed by vendor...
CVE-2011-3051
Use-after-free vulnerability in the Cascading Style Sheets CSS implementation in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the cross-fade function...