chromium -- security fix

Chrome Releases reports: This update includes 1 security fix: 1513170 High CVE-2023-7024: Heap buffer overflow in WebRTC. Reported by Clément Lecigne and Vlad Stolyarov of Google's Threat Analysis Group on 2023-12-19...

KLA62539 DoS vulnerability in Google Chrome

Heap buffer overflow vulnerability was found in Google Chrome. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Chrome Releases: Stable Channel Update for Desktop Exploitation Public exploits exist for this vulnerability. Related products Google-Chrom...

VulnCheck KEV: CVE-2023-7024

Google Chromium WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using...

Oracle Linux 8 : python3.11 (ELSA-2023-7024)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7024 advisory. - Security fixes for CVE-2023-40217 and CVE-2023-41105 Resolves: RHEL-3047, RHEL-3267 - Fix symlink handling in the fix for CVE-2023-24329 Resolves:...

Rocky Linux 8 : firefox (RLSA-2022:7024)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7024 advisory. - libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CVE-2022-40674 Note that Nessus has not tested for this issue but has inste...

Oracle Linux 8 : firefox (ELSA-2022-7024)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-7024 advisory. 102.3.0-7.0.1 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 102.3.0-7 - Fix for expat...

RHEL 8 : firefox (RHSA-2022:7024)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:7024 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to versi...

CVE-2019-7024

CVE-2019-7024 refers to an out-of-bounds read in Adobe Acrobat and Reader, affecting versions up to 2019.010.20069 and earlier (and older 2017.011.30113/2015.006.30464 lines). The vulnerability could lead to information disclosure if exploited remotely or locally as described in the provided sour...

Adobe Reader < 2019.010.20091 / 2017.011.30120 / 2015.006.30475 Multiple Vulnerabilities (APSB19-07) (macOS)

The version of Adobe Reader installed on the remote macOS host is prior to 2019.010.20091, 2017.011.30120, 2015.006.30475. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB19-07 advisory. - Buffer Errors potentially leading to Arbitrary Code Execution CVE-2019-7020,...

Adobe Acrobat DC (Continuous Track) Security Updates (APSB19-07) - Mac OS X

Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Acrobat Reader DC (Continuous Track) Security Updates (APSB19-07) - Windows

Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Acrobat and Reader Out-of-bounds read (APSB19-07: CVE-2019-7024)

A out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

CVE-2018-7024

CVE-2018-7024 entry is rejected/not used; this candidate was in CNA pool and not assigned to issues in 2018.

macOS and Mac OS X Multiple Vulnerabilities (Security Update 2017-003)

The remote host is running Mac OS X 10.10.5, Mac OS X 10.11.6, or macOS 10.12.5 and is missing a security update. It is therefore, affected by multiple vulnerabilities : - An overflow condition exists in the curl component in the dprintfformatf function that is triggered when handling floating...

Apple iOS < 10.3.3 Multiple Vulnerabilities

Binary data appleios1033check.nbin...

CVE-2017-7024

CVE-2017-7024 is a kernel memory corruption vulnerability affecting Apple devices, with iOS prior to 10.3.3, macOS prior to 10.12.6, tvOS prior to 10.2.2, and watchOS prior to 3.2.3. The issue, in the Kernel component, could allow an attacker via a crafted app to execute arbitrary code in a privi...

CVE-2016-7024

CVE-2016-7024 entry is rejected and not associated with any vulnerability; not an active CVE.

CVE-2016-7024

...

CVE-2015-7024

CVE-2015-7024 affects Apple OS X

CVE-2014-7024

The CVE-2014-7024 entry affects the Android app “The Hardest Game Collection” (com.lotfun.abuse) v1.5.0. The issue: the app does not verify X.509 certificates when connecting to SSL servers, allowing a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certificate. ...