[SECURITY] [DSA 3376-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3376-1 [email protected] https://www.debian.org/security/ Michael Gilbert October 20, 2015 https://www.debian.org/security/faq -...

Debian DSA-3376-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2015-1303 Mariusz Mlynski discovered a way to bypass the Same Origin Policy in the DOM implementation. - CVE-2015-1304 Mariusz Mlynski discovered a way to bypass the Same Origin Policy in the v8 JavaScript library. -...

Debian Security Advisory DSA 3376-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2015-1303 Mariusz Mlynski discovered a way to bypass the Same Origin Policy in the DOM implementation. CVE-2015-1304 Mariusz Mlynski discovered a way to bypass the Same Origin Policy in the v8 javascript library...

DSA-3376-1 chromium-browser - security update

Bulletin has no description...

openSUSE Security Update : MozillaFirefox (openSUSE-2015-619)

MozillaFirefox was updated to Firefox 41.0 bnc947003 Security issues fixed : - MFSA 2015-96/CVE-2015-4500/CVE-2015-4501 Miscellaneous memory safety hazards - MFSA 2015-97/CVE-2015-4503 bmo994337 Memory leak in mozTCPSocket to servers - MFSA 2015-98/CVE-2015-4504 bmo1132467 Out of bounds read in...

Mozila ANGLE libGLES 'VertexBufferInterface::reserveVertexSpace' function buffer overflow vulnerability

Mozilla Firefox is an open source web browser.Google ANGLE is a graphics layer engine from Google Inc. A buffer overflow vulnerability in the 'VertexBufferInterface::reserveVertexSpace' function in libGLES of ANGLE used by Mozilla Firefox allows remote attackers to exploit specially crafted OpenG...

Mozilla Firefox ProgramBinary::linkAttributes Function Denial of Service Vulnerability

Mozilla Firefox is an open source web browser Mozilla Firefox versions prior to 41.0 and Firefox ESR versions prior to 38.3 contain a security vulnerability in ProgramBinary::linkAttributes, a function in libGLES within ANGLE, which incorrectly handles renderer access and can be exploited by remo...

CVE-2015-7179

The VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, incorrectly allocates memory for shader attribute arrays, which allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2015-7178

The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, mishandles shader access, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application cras...

Buffer overflow

The VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, incorrectly allocates memory for shader attribute arrays, which allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2015-7179

The CVE-2015-7179 entry is confirmed public with concrete details: The flaw occurs in ANGLE’s libGLES used by Mozilla Firefox on Windows, in VertexBufferInterface::reserveVertexSpace. It allocates memory for shader attribute arrays incorrectly, enabling remote attackers to run arbitrary code or c...

CVE-2015-7178

CVE-2015-7178 affects Mozilla Firefox on Windows via ANGLE’s libGLES, where the ProgramBinary::linkAttributes function mishandles shader access. This can allow a remote attacker to execute arbitrary code or cause a denial of service through crafted OpenGL/WebGL content, leading to memory corrupti...

CVE-2015-7178: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, mishandles shader access, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application cras...

CVE-2015-7179: Improper Restriction of Operations within the Bounds of a Memory Buffer

The VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, incorrectly allocates memory for shader attribute arrays, which allows remote attackers to execute arbitrary code or cause a denial of...

FreeBSD : mozilla -- multiple vulnerabilities (2d56c7f4-b354-428f-8f48-38150c607a05)

The Mozilla Project reports : MFSA 2015-96 Miscellaneous memory safety hazards rv:41.0 / rv:38.3 MFSA 2015-97 Memory leak in mozTCPSocket to servers MFSA 2015-98 Out of bounds read in QCMS library with ICC V4 profile attributes MFSA 2015-99 Site attribute spoofing on Android by pasting URL with...

KLA11454 Multiple vulnerabilities in SeaMonkey

Multiple vulnerabilities were found in SeaMonkey. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions and spoof user interface. Below is a complete list of vulnerabilities: 1. Multiple memory corruption vulnerabilities...

mozilla -- multiple vulnerabilities

The Mozilla Project reports: MFSA 2015-96 Miscellaneous memory safety hazards rv:41.0 / rv:38.3 MFSA 2015-97 Memory leak in mozTCPSocket to servers MFSA 2015-98 Out of bounds read in QCMS library with ICC V4 profile attributes MFSA 2015-99 Site attribute spoofing on Android by pasting URL with...

PT-2015-2191

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 41.0 Mozilla Firefox ESR versions prior to 38.3 Description The issue is related to the incorrect allocation of memory for shader attribute arrays by the VertexBufferInterface::reserveVertexSpace function in...

PT-2015-2190

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 41.0 Mozilla Firefox ESR versions prior to 38.3 Description The issue is related to the mishandling of shader access by the ProgramBinary::linkAttributes function in libGLES in ANGLE, which can be exploited by...

Memory safety errors in libGLES in the ANGLE graphics library — Mozilla

Security researcher Ronald Crane reported two issues in the libGLES portions of the ANGLE graphics library, used for WebGL and OpenGL content on Windows systems. The first of these is a missing bounds check leading to memory safety errors when manipulating shaders which could result in the writin...