Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : libpng vulnerabilities (USN-1367-1)

It was discovered that libpng did not properly verify the embedded profile length of iCCP chunks. An attacker could exploit this to cause a denial of service via application crash. This issue only affected Ubuntu 8.04 LTS. CVE-2009-5063 Jueri Aedla discovered that libpng did not properly verify t...

SeaMonkey < 2.7.2 'png_decompress_chunk' Integer Overflow

The installed version of SeaMonkey is earlier than 2.7.2. Such versions are potentially affected by an integer overflow vulnerability. An integer overflow error exists in 'libpng', a library used by this application. When decompressing certain PNG image files, this error can allow a heap-based...

CVE-2011-5081

Cross-site scripting XSS vulnerability in RestoreFile.pm in BackupPC 3.1.0, 3.2.1, and possibly other earlier versions allows remote attackers to inject arbitrary web script or HTML via the share parameter in a RestoreFile action to index.cgi...

CVE-2011-3023

Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to drag-and-drop operations...

UBUNTU-CVE-2011-3022

translate/translatemanager.cc in Google Chrome before 17.0.963.56 and 19.x before 19.0.1036.7 uses an HTTP session to exchange data for translation, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2011-3018

Heap-based buffer overflow in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to path rendering...

UBUNTU-CVE-2011-3019

Heap-based buffer overflow in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska video aka MKV file...

CVE-2011-3019

Heap-based buffer overflow in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska video aka MKV file...

CVE-2011-3027

Google Chrome before 17.0.963.56 does not properly perform a cast of an unspecified variable during handling of columns, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document...

CVE-2011-3024

Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service application crash via an empty X.509 certificate...

CVE-2011-3015

Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2011-3015

Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

USN-1367-1: libpng vulnerabilities

It was discovered that libpng did not properly verify the embedded profile length of iCCP chunks. An attacker could exploit this to cause a denial of service via application crash. This issue only affected Ubuntu 8.04 LTS. CVE-2009-5063 Jueri Aedla discovered that libpng did not properly verify t...

CVE-2011-3021

Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to subframe loading...

CVE-2011-3023

Google Chrome contains a use-after-free vulnerability in drag-and-drop handling (CVE-2011-3023). It affects Chrome versions before 17.0.963.56 and can lead to denial of service or possibly other impact, potentially user-involvement required. Remediation: upgrade to Chrome 17.0.963.56 or newer. No...

CVE-2011-3016

CVE-2011-3016 involves a use-after-free in Google Chrome prior to 17.0.963.56, tied to a read-after-free issue with counter nodes. The vulnerability could allow remote attackers to cause a denial of service and potentially other unspecified impacts. Public exploitation details beyond the basic de...

CVE-2011-3017

CVE-2011-3017 is a use-after-free vulnerability in Google Chrome prior to 17.0.963.56 related to database handling that can cause denial of service or possibly other impact. The connected documents indicate Chrome versions before 17.0.963.56 are affected; remediation involves updating Chrome to 1...

CVE-2011-3020

CVE-2011-3020 affects Google Chrome’s Native Client validator, with the vulnerability described as unspecified and impact/attack vector unknown in Chrome prior to 17.0.963.56. The provided documents confirm the affected component (Native Client validator) and a pre-patch version, but do not discl...

CVE-2011-3027

CVE-2011-3027 affects Google Chrome prior to version 17.0.963.56. The issue is tied to a cast of an unspecified variable during handling of document columns, enabling a remote attacker to trigger denial of service and potentially other impacts via a crafted document. The description does not spec...

CVE-2011-3019

CVE-2011-3019 : A heap-based buffer overflow in Google Chrome prior to 17.0.963.56 allows remote attackers to cause denial of service or potentially other impact via a crafted Matroska (MKV) file. Affected product: Google Chrome. Root cause: heap-based overflow in MKV parsing. Impact: crash or po...