CVE-2016-2839

CVE-2016-2839 affects Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux. The vulnerability stems from calls to cairo_surface_get_extents that do not properly interact with libav header allocation in FFmpeg 0.10, enabling a remote attacker to crash the application (denial of se...

CVE-2016-2839

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo cairosurfacegetextents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service application crash via a crafted video...

Ubuntu: Security Advisory (USN-2839-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-2839

The CVE-2015-2839 issue affects Citrix NetScaler prior to 10.5 build 52.3nc where the Nitro API returns error messages with an incorrect Content-Type, enabling remote XSS via the file_name JSON member in params/xen_hotfix/0 to nitro/v1/config/xen_hotfix. Multiple sources corroborate the vulnerabi...

KLA10536 Multiple vulnerabilities in Citrix NetScaler

Multiple serious vulnerabilities have been found in Citrix NetScaler. Malicious users can exploit these vulnerabilities to execute or inject arbitrary code and conduct XSS attack. Below is a complete list of vulnerabilities 1. XSS vulnerability can be exploited remotely via a specially designed...

CVE-2014-2839

The CVE-2014-2839 entry concerns the WordPress GD Star Rating plugin, affected version 19.22. The vulnerability is a SQL injection in the s parameter of the gd-star-rating-stats page (wp-admin/admin.php), allowing a remote administrator to execute arbitrary SQL commands. This is rooted in insuffi...

Debian DSA-2839-1 : spice - denial of service

Multiple vulnerabilities have been found in spice, a SPICE protocol client and server library. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2013-4130 David Gibson of Red Hat discovered that SPICE incorrectly handled certain network errors. A remote user...

Debian: Security Advisory (DSA-2839-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2695-1 : chromium-browser - several issues

Several vulnerabilities have been discovered in the Chromium web browser. Multiple use-after-free, out-of-bounds read, memory safety, and cross-site scripting issues were discovered and corrected. - CVE-2013-2837 Use-after-free vulnerability in the SVG implementation allows remote attackers to...

Debian Security Advisory DSA 2695-1 (chromium-browser - several issues)

Several vulnerabilities have been discovered in the Chromium web browser. Multiple use-after-free, out-of-bounds read, memory safety, and cross-site scripting issues were discovered and corrected. CVE-2013-2837 Use-after-free vulnerability in the SVG implementation allows remote attackers to caus...

DSA-2695-1 chromium-browser - several

Bulletin has no description...

Debian: Security Advisory (DSA-2695-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-2839

Google Chrome before 27.0.1453.93 does not properly perform a cast of an unspecified variable during handling of clipboard data, which allows remote attackers to cause a denial of service or possibly have other impact via unknown vectors...

CVE-2013-2839

CVE-2013-2839 affects Google Chrome/Chromium prior to 27.0.1453.93. The issue is a bad cast in clipboard handling of an unspecified variable, which can lead to denial of service or other impact via unknown vectors. Concrete public advisories in connected documents confirm the vulnerability in Chr...

Google Fixes More Than a Dozen Flaws in Chrome 27

Google has released Chrome 27, a new version of its browser that includes a long list of security fixes, many of which are for high-risk vulnerabilities. The company handed out more than $14,000 in rewards to researchers who reported bugs fixed in the latest iteration of Chrome. Google’s security...

Stable Channel Release

The Chrome team is excited to announce the promotion of Chrome 27 to the Stable Channel. Chrome 27.0.1453.93 for Windows, Mac, Linux, and Chrome Frame contains number of new items including: Web pages load 5% faster on average chrome.syncFileSystem API Improved ranking of predictions, improved...

Google Chrome < 14.0.835.163 Multiple Vulnerabilities (Sep 2011) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-2839

The PDF implementation in Google Chrome before 13.0.782.215 on Linux does not properly use the memset library function, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2010-2839

Cisco Unified Presence (6.x prior to 6.0(7) and 7.x prior to 7.0(8)) is affected by CVE-2010-2839, a DoS caused by processing malformed SIP messages. The vulnerability triggers stack memory corruption and possible process failure, potentially interrupting presence services. Cisco’s advisory indic...

CVE-2009-2839

CVE-2009-2839 affects Apple Mac OS X 10.5.8, where the Screen Sharing client is vulnerable to memory corruption when connecting to a remote VNC server via the vnc:// URL. This can allow remote execution of arbitrary code or cause a denial of service (application crash) according to the CVE descri...