97 matches found
CVE-2017-5124
CVE-2017-5124 is a cross-site scripting (UXSS) vulnerability in the MHTML handling of Chromium/Blink, allowing a remote attacker to inject scripts/HTML via a crafted MHTML page in Google Chrome prior to 62.0.3202.62. Affected software: Google Chrome/Chromium (Blink). Impact: arbitrary script exec...
CVE-2017-5124
Removed by vendor...
Mozilla Firefox < 58.0.1
The version of Firefox installed on the remote Windows host is prior to 58.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2018-05 advisory. - Sanitize HTML fragments created for chrome-privileged documentsCVE-2018-5124 CVE-2018-5124 Note that Nessus has not tested for...
Ubuntu: Security Advisory (USN-3552-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Firefox < 58.0.1 Arbitrary Code Execution (macOS)
The version of Mozilla Firefox installed on the remote macOS or Mac OS X host is prior to 58.0.1. It is, therefore, affected by an arbitrary code execution vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid106560; scriptversion"1.7";...
Ubuntu 14.04 LTS / 16.04 LTS : Firefox vulnerability (USN-3552-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3552-1 advisory. Johann Hofmann discovered that HTML fragments created for chrome-privileged documents were not properly sanitized. An attacker could exploit this to...
USN-3552-1: Firefox vulnerability
Johann Hofmann discovered that HTML fragments created for chrome-privileged documents were not properly sanitized. An attacker could exploit this to execute arbitrary code. CVE-2018-5124...
USN-3552-1 firefox vulnerability
Johann Hofmann discovered that HTML fragments created for chrome-privileged documents were not properly sanitized. An attacker could exploit this to execute arbitrary code. CVE-2018-5124...
Mozilla Firefox Security Advisories (MFSA2018-05, MFSA2018-05) - Mac OS X
Mozilla Firefox is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Fedora 27 : qt5-qtwebengine (2017-15b815b9b7)
An update of QtWebEngine to the security and bugfix release 5.9.3, including : - Security fixes from Chromium up to version 62.0.3202.89. Including: CVE-2017-5124, CVE-2017-5126, CVE-2017-5127, CVE-2017-5128, CVE-2017-5129, CVE-2017-5132, CVE-2017-5133, CVE-2017-15386, CVE-2017-15387,...
Fedora Update for chromium FEDORA-2017-ea44f172e3
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 26 : chromium (2017-ea44f172e3)
Security fix for CVE-2017-15412 CVE-2017-15422 CVE-2017-15407 CVE-2017-15408 CVE-2017-15409 CVE-2017-15410 CVE-2017-15411 CVE-2017-15413 CVE-2017-15415 CVE-2017-15416 CVE-2017-15417 CVE-2017-15418 CVE-2017-15419 CVE-2017-15420 CVE-2017-15423 CVE-2017-15424 CVE-2017-15425 CVE-2017-15426...
Security update for chromium (important)
This update to Chromium 63.0.3239.84 fixes the following security issues: - CVE-2017-5124: UXSS with MHTML - CVE-2017-5125: Heap overflow in Skia - CVE-2017-5126: Use after free in PDFium - CVE-2017-5127: Use after free in PDFium - CVE-2017-5128: Heap overflow in WebGL - CVE-2017-5129: Use after...
Fedora 25 : qt5-qtwebengine (2017-9015553e3d)
An update of QtWebEngine to the security and bugfix release 5.9.3, including : - Security fixes from Chromium up to version 62.0.3202.89. Including: CVE-2017-5124, CVE-2017-5126, CVE-2017-5127, CVE-2017-5128, CVE-2017-5129, CVE-2017-5132, CVE-2017-5133, CVE-2017-15386, CVE-2017-15387,...
Fedora 26 : qt5-qtwebengine (2017-4d90e9fc97)
An update of QtWebEngine to the security and bugfix release 5.9.3, including : - Security fixes from Chromium up to version 62.0.3202.89. Including: CVE-2017-5124, CVE-2017-5126, CVE-2017-5127, CVE-2017-5128, CVE-2017-5129, CVE-2017-5132, CVE-2017-5133, CVE-2017-15386, CVE-2017-15387,...
Fedora Update for qt5-qtwebengine FEDORA-2017-9015553e3d
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for qt5-qtwebengine FEDORA-2017-4d90e9fc97
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Chrome < 62 UXSS(CVE-2017-5124)
No description provided by source. PoC.mht ------------------------- MIME-Version: 1.0 Content-Type: multipart/related; type="text/html"; boundary="----MultipartBoundary--" CVE-2017-5124 ------MultipartBoundary-- Content-Type: application/xml; ------MultipartBoundary-- Content-Type: text/html...
CVE-2017-5124
creationtimestamp| type| source ---|---|--- 2017-11-14 13:02:37+00:00| published-proof-of-concept| https://t.me/canyoupwnme/2640 2017-11-14 13:03:18+00:00| exploited| https://t.me/HackerOne/1262 2017-11-14 13:04:29+00:00| published-proof-of-concept| https://t.me/R0Crew/251 2017-11-14...
[SECURITY] [DSA 4020-1] chromium-browser security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4020-1 [email protected] https://www.debian.org/security/ Michael Gilbert November 05, 2017 https://www.debian.org/security/faq -...