Security fix for the ALT Linux 10 package firefox-esr version 52.5.0-alt1

Nov. 15, 2017 Andrey Cherepanov 52.5.0-alt1 - New ESR version 52.5.0 - Fixes: + CVE-2017-7828 Use-after-free of PressShell while restyling layout + CVE-2017-7830 Cross-origin URL information leak through Resource + CVE-2017-7826 Memory safety bugs fixed in Firefox 57 and Firefox ESR...

UBUNTU-CVE-2017-7828

A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been freed while still in use. This results in a potentially exploitable crash during these operations. This vulnerability affects Firefox 57, Firefox ESR 52.5, and Thunderbird 52.5...

FreeBSD : mozilla -- multiple vulnerabilities (f78eac48-c3d1-4666-8de5-63ceea25a578)

Mozilla Foundation reports : CVE-2017-7828: Use-after-free of PressShell while restyling layout CVE-2017-7830: Cross-origin URL information leak through Resource Timing API CVE-2017-7831: Information disclosure of exposed properties on JavaScript proxy objects CVE-2017-7832: Domain spoofing throu...

Debian: Security Advisory (DSA-4035-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-7828

CVE-2016-7828 is rejected/not used; this candidate number is not associated with a vulnerability.

CVE-2015-7828

CVE-2015-7828 concerns SAP HANA Database 1.00 SPS10 and earlier, where authentication is not required, allowing remote attackers to execute arbitrary code via a TrexNet packet to any of the following methods: fcopydir, fmkdir, frmdir, getenv, dumpenv, fcopy, fput, fdel, fmove, fget, fappend, fdir...

The vulnerabilities of the microprogrammed Ethernet switches from Moxa, models PT-508, PT-7728, PT-7828, and MDS-G4012, allow attackers to cause malfunctions during maintenance operations.

The vulnerability of the microprogrammed Ethernet switches from Moxa, models PT-508, PT-7728, PT-7828, and MDS-G4012, is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

CVE-2014-7828

FreeIPA 4.0.x before 4.0.5 and 4.1.x before 4.1.1, when 2FA is enabled, allows remote attackers to bypass the password requirement of the two-factor authentication leveraging an enabled OTP token, which triggers an anonymous bind...

DEBIAN-CVE-2014-7828

FreeIPA 4.0.x before 4.0.5 and 4.1.x before 4.1.1, when 2FA is enabled, allows remote attackers to bypass the password requirement of the two-factor authentication leveraging an enabled OTP token, which triggers an anonymous bind...

CVE-2014-7828

CVE-2014-7828 affects FreeIPA 4.0.x (before 4.0.5) and 4.1.x (before 4.1.1) where 2FA is enabled. An OTP token could bypass the password requirement, enabling a remote attacker to perform an anonymous bind. The description notes a password bypass via OTP during 2FA; no additional exploit details ...

Fedora 21 : freeipa-4.1.1-1.fc21 / slapi-nis-0.54.1-1.fc21 (2014-14427)

freeipa : - Update to upstream 4.1.1 - see http://www.freeipa.org/page/Releases/4.1.1 - fix CVE-2014-7828 slapi-nis : - support FreeIPA overrides in LDAP BIND callback - ignore FreeIPA override searchs outside configured schema compat subtrees Note that Tenable Network Security has extracted the...