64 matches found
CVE-2019-5759
CVE-2019-5759 is a use-after-free vulnerability in Chromium-based browsers related to handling HTML pages containing select elements. The Debian advisory attributes it to Almog Benin and confirms a use-after-free in that area, contributing to potential sandbox escape. Public details across connec...
[SECURITY] [DSA 4395-1] chromium security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4395-1 [email protected] https://www.debian.org/security/ Michael Gilbert February 18, 2019 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4395-1] chromium security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4395-1 [email protected] https://www.debian.org/security/ Michael Gilbert February 18, 2019 https://www.debian.org/security/faq -...
openSUSE: Security Advisory for chromium (openSUSE-SU-2019:0205-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Debian DSA-4395-1 : chromium - security update
Several vulnerabilities have been discovered in the chromium web browser. - CVE-2018-17481 A use-after-free issue was discovered in the pdfium library. - CVE-2019-5754 Klzgrad discovered an error in the QUIC networking implementation. - CVE-2019-5755 Jay Bosamiya discovered an implementation erro...
Critical: Red Hat Security Advisory: chromium-browser security update
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
Google Chrome < 72.0.3626.81 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 72.0.3626.81. It is, therefore, affected by multiple vulnerabilities as referenced in the 201901stable-channel-update-for-desktop advisory. - Missing URI encoding of untrusted input in DevTools in Google Chrome prior to...
Google Chrome < 72.0.3626.81 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 72.0.3626.81. It is, therefore, affected by multiple vulnerabilities as referenced in the 201901stable-channel-update-for-desktop advisory. - Missing URI encoding of untrusted input in DevTools in Google Chrome prior to...
CVE-2019-5759
Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to 72.0.3626.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...
Fedora 27 : mujs (2018-5b2e981f14)
Security fix for CVE-2018-5759. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...
Fedora 26 : mujs (2018-d4746c772f)
Security fix for CVE-2018-5759. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...
Artifex MuJS 1.0.2 - Integer Overflow
Artifex MuJS 1.0.2 - Integer Overflow Exploit Title: DoS caused by the interactive call between two functions Date: 2018-01-16 Exploit Author: Andrea Sindoni - @invictus1306 Vendor: Artifex https://www.artifex.com/ Software Link: https://github.com/ccxvii/mujs Version: Mujs -...
Artifex MuJS 1.0.2 - Integer Overflow Exploit
Exploit for multiple platform in category dos / poc Exploit Title: DoS caused by the interactive call between two functions Date: 2018-01-16 Exploit Author: Andrea Sindoni - @invictus1306 Vendor: Artifex https://www.artifex.com/ Software Link: https://github.com/ccxvii/mujs Version: Mujs -...
Artifex MuJS Denial Of Service
The continuous call between the two functions "jsCcexp" function and "cbinary" allows attackers to cause a denial of service application crash via a crafted js file Exploit Title: DoS caused by the interactive call between two functions Date: 2018-01-16 Exploit Author: Andrea Sindoni -...
CVE-2018-5759
CVE-2018-5759 affects Artifex MuJS, up to version 1.0.2, where the parser (jsparse.c) does not correctly maintain the AST depth for binary expressions. This can enable a remote attacker to trigger excessive recursion and cause a denial of service. Public references (Exploit-DB) describe a DoS PoC...
CVE-2018-5759
jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service excessive recursion via a crafted file...
CVE-2016-5759
The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root...
CVE-2016-5759
The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root...
CVE-2016-5759
CVE-2016-5759 affects the mkdumprd script used by kdump environments. The vulnerability arises because mkdumprd can invoke dracut from the current directory (./dracut), enabling a local attacker to trick the administrator into executing code with root privileges. Public sources (NVD, SUSE and Red...
