CVE-2017-5401

A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vulnerability affects Firefox 52, Firefox ESR 45.8, Thunderbird 52, and Thunderbird 45.8...

DEBIAN-CVE-2017-5401

A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vulnerability affects Firefox 52, Firefox ESR 45.8, Thunderbird 52, and Thunderbird 45.8...

CVE-2017-5401

CVE-2017-5401 is a memory corruption crash triggered by ErrorResult handling in Firefox/Thunderbird. Affected versions are Firefox < 52 and ESR < 45.8, Thunderbird < 52 and Thunderbird

Code injection

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2018-10480

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2018-10480

Foxit Reader 9.0.0.29935 is affected by CVE-2018-10480 due to improper validation in the handling of the U3D Node Name buffer, causing a read past the end of an allocated buffer. The vulnerability can disclose sensitive information and, in conjunction with other vulnerabilities, may allow code ex...

Updated iceape packages fix security vulnerabilities

Updated iceape packages include security fixes from upstream Seamonkey and Firefox: Multiple flaws were found in the way Iceape 2.48 processes various types of web content, where loading a web page containing malicious content could cause Iceape to crash, execute arbitrary code, or disclose...

Virtuozzo 6 : thunderbird (VZLSA-2017-0498)

An update for thunderbird is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

Virtuozzo 7 : firefox (VZLSA-2017-0461)

An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2015-5401

CVE-2015-5401 affects Teradata Gateway and TD Express. A remote attacker can cause a denial of service (database crash) by sending a malformed CONFIG REQUEST message. Affected versions: Teradata Gateway prior to 15.00.03.02-1 and 15.10.x prior to 15.10.00.01-1; TD Express prior to 15.00.02.08_Sle...

CVE-2015-5401

Teradata Gateway before 15.00.03.02-1 and 15.10.x before 15.10.00.01-1 and TD Express before 15.00.02.08Sles10 and 15.00.02.08Sles11 allow remote attackers to cause a denial of service database crash via a malformed CONFIG REQUEST message...

Security fix for the ALT Linux 10 package firefox-esr version 52.0-alt1

May 8, 2017 Andrey Cherepanov 52.0-alt1 - New release 52.0 based on legion@ build. - Built with internal icu. - Fixed: + CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP + CVE-2017-5401: Memory Corruption when handling ErrorResult + CVE-2017-5402: Use-after-free working with events in...

EulerOS 2.0 SP2 : firefox (EulerOS-SA-2017-1047)

According to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or,...

Emby MediaServer 3.2.5 - Password Reset

Emby MediaServer 3.2.5 - Password Reset Emby MediaServer 3.2.5 Password Reset Vulnerability Vendor: Emby LLC Product web page: https://www.emby.media Affected version: 3.2.5 3.1.5 3.1.2 3.1.1 3.1.0 3.0.0 Summary: Emby formerly Media Browser is a media server designed to organize, play, and stream...

CVE-2016-5401

CVE-2016-5401 is a CSRF vulnerability in Red Hat JBoss BRMS and BPMS 6. The flaw allows remote attackers to hijack user authentication to perform state-changing requests on the affected application via a crafted web page. Connected sources confirm the affected products are JBoss BRMS/BPMS 6, but ...

CVE-2016-5401

Cross-site request forgery CSRF vulnerability in Red Hat JBoss BRMS and BPMS 6 allows remote attackers to hijack the authentication of users for requests that modify instances via a crafted web page...

Ubuntu: Security Advisory (USN-3216-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS : Firefox regression (USN-3216-2)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3216-2 advisory. USN-3216-1 fixed vulnerabilities in Firefox. The update resulted in a startup crash when Firefox is used with XRDP. This update fixes the problem. We...

USN-3233-1: Thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to bypass same origin restrictions, obtain sensitive information, cause a denial of service via application...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2017:0714-1)

This update for MozillaFirefox to ESR 45.8 fixes the following issues: Security issues fixed bsc1028391 : - CVE-2017-5402: Use-after-free working with events in FontFace objects - CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping - CVE-2017-5400: asm.js...