CVE-2016-5171

CVE-2016-5171 affects Blink in Chromium/Chrome. WebKit/Source/bindings/templates/interface.cpp does not prevent certain constructor calls, enabling a remote attacker to trigger a use-after-free via crafted JavaScript, potentially causing denial of service and unspecified other impact. Affected: B...

CVE-2016-5171

Removed by vendor...

openSUSE Security Update : chromium (openSUSE-2016-1085)

Chromium was updated to 53.0.2785.113 to fix a number of security issues and bugs. The following vulnerabilities were fixed : - CVE-2016-5170: Use after free in Blink - CVE-2016-5171: Use after free in Blink - CVE-2016-5172: Arbitrary Memory Read in v8 - CVE-2016-5173: Extension resource access -...

Fedora 24 : chromium (2016-b15185b72a)

Update to 53.0.2785.113 Security fix for CVE-2016-5170, CVE-2016-5171, CVE-2016-5172, CVE-2016-5173, CVE-2016-5174, CVE-2016-5175 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...

FreeBSD : chromium -- multiple vulnerabilities (653a8059-7c49-11e6-9242-3065ec8fd3ec)

Google Chrome Releases reports : Several security fixes in this release, including : - 641101 High CVE-2016-5170: Use after free in Blink.Credit to Anonymous - 643357 High CVE-2016-5171: Use after free in Blink. Credit to Anonymous - 616386 Medium CVE-2016-5172: Arbitrary Memory Read in v8. Credi...

Debian DSA-3667-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2016-5170 A use-after-free issue was discovered in Blink/Webkit. - CVE-2016-5171 Another use-after-free issue was discovered in Blink/Webkit. - CVE-2016-5172 Choongwoo Han discovered an information leak in the v8...

openSUSE: Security Advisory for chromium (openSUSE-SU-2016:2311-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-5171

WebKit/Source/bindings/templates/interface.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not prevent certain constructor calls, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via crafted JavaScript code...

Debian: Security Advisory (DSA-3667-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-5170-5173 UAA Vulnerabilities | Cloud Foundry

CVE-2015-5170-5173 UAA Vulnerabilities Low Vendor Cloud Foundry Foundation Versions Affected cf-release versions v215 & prior UAA versions 2.5.1 & prior Description CSRF Attack on PWS. It is possible to log the user into another account instead of the account they intended to log into because of...

CVE-2014-5171

CVE-2014-5171 concerns SAP HANA Extend Application Services (XS). The issue is that transmissions for applications using SSL form-based authentication are not encrypted, enabling remote attackers to capture credentials and other sensitive data by sniffing the network. The affected component is th...

CVE-2013-5171

CVE-2013-5171 affects Apple Mac OS X prior to 10.9. The vulnerability is in CoreGraphics and allows local users to bypass Secure Input Mode and log keystrokes for arbitrary applications through a hotkey event registration. The issue is documented in multiple sources (e.g., Red Hat, NVD) with the ...

CVE-2012-5171

CVE-2012-5171 affects BeZIP before 3.10 from Be Graph Co., Ltd. A directory traversal vulnerability in the extraction process allows a crafted archive to create or overwrite arbitrary files on a affected system. The root cause is improper validation of archive paths during extraction, enabling ac...

CVE-2011-5171

CVE-2011-5171 affects CyberLink Power2Go 7 (build 196) and 8 (build 1031). The issue arises from multiple stack-based buffer overflows in parsing a p2g project file, specifically via the src and name parameters, enabling remote code execution when a crafted file is opened. Public details confirm ...

CVE-2010-5171

Outpost Security Suite Pro versions 6.7.3.3063.452.0726 and 7.0.3330.505.1221 BETA on Windows XP are affected by a race condition (KHOBE) that lets local users bypass kernel-mode hook handlers and run code that signature-based malware detection might not block. Root cause: a race condition during...

CyberLink Power2Go name Attribute (p2g) Stack Buffer Overflow Exploit

This module exploits a stack buffer overflow in CyberLink Power2Go version 8.x The vulnerability is triggered when opening a malformed p2g file containing an overly long string in the 'name' attribute of the file element. This results in overwriting a structured exception handler record. Module...

CVE-2008-5171

The CVE-2008-5171 entry describes multiple directory traversal vulnerabilities in phpBLASTER CMS 1.0 RC1, specifically in admin/minibb/index.php. When register_globals is enabled, an attacker can cause the application to include and execute arbitrary local files via directory traversal sequences ...

CVE-2008-5171

creationtimestamp| type| source ---|---|--- 2008-06-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5952...

CVE-2007-5171

Technical details about CVE-2007-5171 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2006-5171

Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates CA Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe Overflow...