UBUNTU-CVE-2021-4207

A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values cursor-header.width and cursor-header.height can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. A malicious privileged guest user could use...

QEMU 安全漏洞

QEMU Quick Emulator is a set of simulation processor software. The software is fast and cross-platform. QEMU suffers from a buffer overflow vulnerability that stems from a double extraction in qxlcursor that could result in a heap buffer overflow. A malicious privileged attacker can exploit this...

The vulnerability of the dwarf::cursor::uleb function in the ELF and DWARF parsing library by Libelfin allows a attacker to cause a service failure.

The vulnerability of the dwarf::cursor::uleb function in the ELF and DWARF v4 reading library is related to insufficient elimination of special elements in the request. Exploiting this vulnerability allows a remote attacker to cause a service failure using a specially created ELF file...

The vulnerability of the Web Cursor component in Google Chrome and Microsoft Edge browsers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Web Cursor component in Google Chrome and Microsoft Edge is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a...

The vulnerability of the dwarf::cursor::skip_form function in the ELF and DWARFv4 file reading library Libelfin allows a attacker to cause a service failure.

The vulnerability of the dwarf::cursor::skipform function in the ELF and DWARFv4 file reading library Libelfin is related to errors during resource release. Exploiting this vulnerability allows a remote attacker to cause service interruptions using a specially created ELF file...

Remote Code Execution (RCE)

chrome is vulnerable to remote code execution. The vulnerability exists due to an Inappropriate implementation in Web Cursor...

Chromium: CVE-2022-1138 Inappropriate implementation in Web Cursor

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

KLA12495 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Portals can be...

Google Chrome 安全特征问题漏洞

Google Chrome is a web browser from Google, Inc.V8 is an open source JavaScript engine. Google Chrome suffers from a security signature issue vulnerability that exists due to a misimplementation of the web cursor in Google Chrome. A remote attacker could create a specially crafted web page to tri...

Mageia: Security Advisory (MGASA-2021-0551)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-46345

There is an Assertion 'cesu8cursorp == cesu8endp' failed at /jerry-core/lit/lit-strings.c in JerryScript 3.0.0...

UBUNTU-CVE-2021-46345

There is an Assertion 'cesu8cursorp == cesu8endp' failed at /jerry-core/lit/lit-strings.c in JerryScript 3.0.0...

CentOS: Security Advisory for firefox (CESA-2021:5014)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2022-3841

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is related to an integer overflow in the cursor alloc function of the QEMU hardware emulator, specifically in the QXL display device emulation. This can lead to the allocation of a sma...

openSUSE 15 Security Update : MozillaFirefox (openSUSE-SU-2021:1575-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1575-1 advisory. - Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability...

firefox security update

CentOS Errata and Security Advisory CESA-2021:5014 An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Mozilla Thunderbird Security Advisories (MFSA2021-50, MFSA2021-54) - Windows

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Mozilla Thunderbird Security Advisories (MFSA2021-50, MFSA2021-54) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

SUSE SLES11: MozillaFirefox / MozillaFirefox-translations-common / etc (SUSE-SU-2021:14859-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:14859-1 advisory. Update to Extended Support Release 91.4.0 bsc1193485: - CVE-2021-43536: URL leakage when navigating while executing asynchronous function -...

Spoofing Attack

thunderbird and firefox are vulnerable to spoofing attack. The vulnerability exists due to a lack of sanitization of the cursor x and y axis input when using a zoomed native cursor...