Ubuntu 14.04 LTS : libssh vulnerabilities (USN-2912-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2912-1 advisory. Mariusz Ziulek discovered that libssh incorrectly handled certain packets. A remote attacker could possibly use this issue to cause libssh to crash,...

CVE-2015-2912

CVE-2015-2912 affects OrientDB Studio (Community Edition) via its JSONP endpoint. The vulnerability allows CSRF by not properly restricting JSONP callback values, enabling an unauthenticated or remote attacker to perform actions and potentially access sensitive data. Affected versions are OrientD...

openSUSE Security Update : chromium (openSUSE-SU-2013:1556-1)

Update to Chromium 30.0.1599.66 : - Easier searching by image - A number of new apps/extension APIs - Lots of under the hood changes for stability and performance - Security fixes : + CVE-2013-2906: Races in Web Audio + CVE-2013-2907: Out of bounds read in Window.prototype object + CVE-2013-2908:...

openSUSE Security Update : libmodplug (openSUSE-SU-2011:0943-1)

This update of libmodplug0 fixes the following issues : 1 An integer overflow error exists within the 'CSoundFile::ReadWav' function src/loadwav.cpp when processing certain WAV files. This can be exploited to cause a heap-based buffer overflow by tricking a user into opening a specially crafted W...

openSUSE Security Update : libmodplug (openSUSE-SU-2011:0943-1)

This update of libmodplug0 fixes the following issues : 1 An integer overflow error exists within the 'CSoundFile::ReadWav' function src/loadwav.cpp when processing certain WAV files. This can be exploited to cause a heap-based buffer overflow by tricking a user into opening a specially crafted W...

Debian DSA-2912-1 : openjdk-6 - security update

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure or denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

Debian: Security Advisory (DSA-2912-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome NotifyInstanceWasDeleted Use After Free (CVE-2013-2912)

A use after free vulnerability has been reported in Google Chrome...

SuSE Update for chromium openSUSE-SU-2013:1556-1 (chromium)

Check for the Version of chromium OpenVAS Vulnerability Test $Id: gbsuse201315561.nasl 8045 2017-12-08 08:39:37Z santu $ SuSE Update for chromium openSUSE-SU-2013:1556-1 chromium Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This...

Debian DSA-2785-1 : chromium-browser - several vulnerabilities

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2013-2906 Atte Kettunen of OUSPG discovered race conditions in Web Audio. - CVE-2013-2907 Boris Zbarsky discovered an out-of-bounds read in window.prototype. - CVE-2013-2908 Chamal de Silva discovered an address bar...

chromium: 30.0.1599.66 security and bugfix update (important)

Update to Chromium 30.0.1599.66: - Easier searching by image - A number of new apps/extension APIs - Lots of under the hood changes for stability and performance - Security fixes: + CVE-2013-2906: Races in Web Audio + CVE-2013-2907: Out of bounds read in Window.prototype object + CVE-2013-2908:...

Google Chrome Multiple Vulnerabilities-01 (Oct 2013) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2013-2912

Use-after-free vulnerability in the PepperInProcessRouter::SendToHost function in content/renderer/pepper/pepperinprocessrouter.cc in the Pepper Plug-in API PPAPI in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service or possibly have unspecified other impact vi...

CVE-2013-2912

CVE-2013-2912 is a Use-after-free in the Pepper Plug-in API (PPAPI) of Chrome/Chromium, specifically in PepperInProcessRouter::SendToHost. The vulnerability allows a remote attacker to cause a denial of service and potentially other unspecified impact via a resource-destruction message. Affected ...

FreeBSD : chromium -- multiple vulnerabilities (e5414d0c-2ade-11e3-821d-00262d5ed8ee)

Google Chrome Releases reports : 50 security fixes in this release, including : - 223962270758271161284785284786 Medium CVE-2013-2906 : Races in Web Audio. Credit to Atte Kettunen of OUSPG. - 260667 Medium CVE-2013-2907: Out of bounds read in Window.prototype object. Credit to Boris Zbarsky. -...

Stable Channel Update

The Chrome team is excited to announce the promotion of Chrome 30 to the Stable channel for Windows, Mac, Linux and Chrome Frame. Chrome 30.0.1599.66 contains a number of fixes and improvements, including: Easier searching by image A number of new apps/extension APIs Lots of under the hood change...

Scientific Linux Security Update : gstreamer-plugins on SL4.x i386/x86_64

The gstreamer-plugins packages contain plug-ins used by the GStreamer streaming-media framework to support a wide variety of media formats. An integer overflow flaw, a boundary error, and multiple off-by-one flaws were found in various ModPlug music file format library libmodplug modules, embedde...

CVE-2011-2912

CVE-2011-2912: In libmodplug, the CSoundFile::ReadS3M() implementation in src/load_s3m.cpp before version 0.8.8.4 is affected by a stack-based buffer overflow when processing crafted S3M files with an invalid offset. This can lead to denial of service and may allow arbitrary code execution. Other...

CVE-2012-2912

Multiple cross-site scripting XSS vulnerabilities in the LeagueManager plugin 3.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 group parameter in the show-league page or 2 season parameter in the team page to wp-admin/admin.php...

CVE-2012-2912

CVE-2012-2912 concerns the WordPress plugin LeagueManager (v3.7). The issue is an XSS vulnerability exploitable through parameters in the admin flow: the show-league page’s group parameter and the team page’s season parameter passed to wp-admin/admin.php. Exploitation could allow remote attackers...