CVE-2012-5149

Removed by vendor...

CVE-2012-5147

CVE-2012-5147 is a use-after-free in Google Chrome’s DOM handling prior to 24.0.1312.52. Affected: Chrome (versions before 24.0.1312.52). Root cause: use-after-free in DOM processing can be triggered remotely. Impact: remote denial of service and possibly other unspecified effects. Public referen...

CVE-2012-5155

CVE-2012-5155 concerns Google Chrome on Mac OS X prior to version 24.0.1312.52, where the browser did not use an appropriate sandboxing approach for worker processes. This vulnerability could let remote attackers bypass intended access restrictions via unspecified vectors. Public documentation co...

CVE-2012-5151

Integer overflow in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code in a PDF document...

CVE-2012-5145

Technical details about CVE-2012-5145 are not publicly available in the provided documents; monitor for updates.

CVE-2012-5152

CVE-2012-5152 is reported as an out-of-bounds read when seeking video data in Google Chrome/Chromium. Connected openSUSE advisories (openSUSE-SU-2013:0236-1) list CVE-2012-5152 among fixed issues and indicate an upgrade of Chromium to a newer series (e.g., 26.x) as the remediation. The fixed vers...

CVE-2012-5157

CVE-2012-5157 affects Google Chrome prior to 24.0.1312.52. The issue arises from improper handling of image data in PDF documents, enabling a remote attacker to trigger an out-of-bounds read and cause a denial of service. The provided documents identify the vulnerable condition and mention a Chro...

CVE-2012-5148

CVE-2012-5148 affects Google Chrome’s hyphenation feature, where file-name validation is inadequate on builds before 24.0.1312.52. Public details in the provided documents are limited to the generic impact; explicit exploitation vectors are not described. Related advisories note CVE-2012-5148 amo...

CVE-2012-5149

CVE-2012-5149 affects Google Chrome before 24.0.1312.52, where an integer overflow in the audio IPC layer can be exploited remotely to cause a denial of service or other unspecified impact. The vulnerable component is Chrome’s audio IPC handling; the root cause is an integer overflow. Impact is a...

CVE-2012-5150

CVE-2012-5150 is described in connected advisories as a use-after-free in FFmpeg related to seek operations on video data, exploitable via crafted media inputs to cause a denial of service. Mandriva’s advisory MDVSA-2014:129 explicitly ties CVE-2012-5150 to a vulnerability in FFmpeg prior to 1.1....

[SECURITY] [DSA 2608-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2608-1 [email protected] http://www.debian.org/security/ Florian Weimer January 15, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2607-1] qemu-kvm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2607-1 [email protected] http://www.debian.org/security/ Florian Weimer January 15, 2013 http://www.debian.org/security/faq -...

freetype

New freetype packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/freetype-2.4.11-i486-1slack14.0.txz: Upgraded. This release fixes several security bugs that could...

Important: Red Hat Security Advisory: jbossweb security update

Updated jbossweb packages that fix one security issue are now available for JBoss Enterprise Application Platform 6.0.1 for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS ba...

Important: Red Hat Security Advisory: jbossweb security update

An update for JBoss Enterprise Application Platform 6.0.1 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which giv...

Important: Red Hat Security Advisory: JBoss Enterprise SOA Platform 4.2.0.CP05 and 4.3.0.CP05 update

An update for JBoss Enterprise SOA Platform 4.2.0.CP05 and 4.3.0.CP05 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base scor...

USN-1689-1: Linux kernel vulnerabilities

Jon Howell reported a flaw in the Linux kernel's KVM Kernel-based virtual machine subsystem's handling of the XSAVE feature. On hosts, using qemu userspace, without the XSAVE feature an unprivileged local attacker could exploit this flaw to crash the system. CVE-2012-4461 A flaw was discovered in...

USN-1688-1: Linux kernel (Oneiric backport) vulnerabilities

Jon Howell reported a flaw in the Linux kernel's KVM Kernel-based virtual machine subsystem's handling of the XSAVE feature. On hosts, using qemu userspace, without the XSAVE feature an unprivileged local attacker could exploit this flaw to crash the system. CVE-2012-4461 A flaw was discovered in...

NFR Agent Heap Overflow (CVE-2012-4956)

...

Ubuntu: Security Advisory (USN-1691-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...