147 matches found
Design/Logic Flaw
The WebGL implementation in Google Chrome before 37.0.2062.94 does not ensure that clear calls interact properly with the state of a draw buffer, which allows remote attackers to cause a denial of service read of uninitialized memory via a crafted CANVAS element, related to...
CVE-2014-3173
Removed by vendor...
CVE-2014-3173
The WebGL implementation in Google Chrome before 37.0.2062.94 does not ensure that clear calls interact properly with the state of a draw buffer, which allows remote attackers to cause a denial of service read of uninitialized memory via a crafted CANVAS element, related to...
CVE-2014-3173: Improper Restriction of Operations within the Bounds of a Memory Buffer
The WebGL implementation in Google Chrome before 37.0.2062.94 does not ensure that clear calls interact properly with the state of a draw buffer, which allows remote attackers to cause a denial of service read of uninitialized memory via a crafted CANVAS element, related to...
PT-2014-1380
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 37.0.2062.94 Description The issue is related to the WebGL implementation in Google Chrome, where clear calls do not interact properly with the state of a draw buffer. This allows remote attackers to cause a...
CVE-2014-3173
The WebGL implementation in Google Chrome before 37.0.2062.94 does not ensure that clear calls interact properly with the state of a draw buffer, which allows remote attackers to cause a denial of service read of uninitialized memory via a crafted CANVAS element, related to...
UBUNTU-CVE-2014-3173
The WebGL implementation in Google Chrome before 37.0.2062.94 does not ensure that clear calls interact properly with the state of a draw buffer, which allows remote attackers to cause a denial of service read of uninitialized memory via a crafted CANVAS element, related to...
Opera Denial of Service by <canvas> Element
No description provided by source. Opera.html html body onload=Opera script language=JavaScript function Opera canvas = document.getElementByIdcanvas; ctx = canvas.getContext2d; ctx.getImageData0,0,0x20000,0x20000; /script canvas id=canvas width=10 height=10/canvas /body /html Original Advisory:...
Out-of-bounds
The sse2compositesrcx8888888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds write and application crash by painting on a CANVAS element...
CVE-2014-1528
The sse2compositesrcx8888888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds write and application crash by painting on a CANVAS element...
Mozilla: Miscellaneous use-after-free issues found through ASAN fuzzing (MFSA 2013-100)
Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell aka presentation shell implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before...
Design/Logic Flaw
Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell aka presentation shell implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before...
CVE-2013-5599
Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell aka presentation shell implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before...
Mozilla: Miscellaneous use-after-free issues found through ASAN fuzzing (MFSA 2013-100)
Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell aka presentation shell implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before...
CVE-2013-5599
Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell aka presentation shell implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before...
Design/Logic Flaw
The WebGL implementation in Mozilla Firefox before 24.0, when NVIDIA graphics drivers are used on Mac OS X, allows remote attackers to obtain desktop-screenshot data by reading from a CANVAS element...
CVE-2013-1729
The WebGL implementation in Mozilla Firefox before 24.0, when NVIDIA graphics drivers are used on Mac OS X, allows remote attackers to obtain desktop-screenshot data by reading from a CANVAS element...
PT-2013-3360
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 24.0 Description The issue concerns the WebGL implementation in Mozilla Firefox, specifically when used with NVIDIA graphics drivers on Mac OS X. It allows remote attackers to obtain desktop-screenshot data by...
Mozilla Products Multiple Vulnerabilities-04 January13 (Mac OS X)
This host is installed with Mozilla Firefox/Thunderbird/Seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvuln04jan13macosx.nasl 6481 2017-06-29 08:15:47Z cfischer $ Mozilla Products Multiple Vulnerabilities-04 January13 Mac OS X Authors: Rachan...
Mozilla Firefox <canvas>元素跨域信息泄露漏洞
BUGTRAQ ID: 41878 CVE ID: CVE-2010-1207 Firefox是一款流行的开源WEB浏览器。 攻击者可以利用canvas元素破坏同源策略读取其他站点的数据。尽管对canvas元素设置了读限制，但可通过保持对元素上下文的引用并从DOM删除相关的canvas节点绕过上述限制。 Mozilla Firefox 3.6.x Mozilla Thunderbird 3.1.x 厂商补丁： Mozilla ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mozilla.org/ RedHat ------...