Memory corruption

The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 on Linux, when a large number of sampler uniforms are used, does not properly interact with Mesa drivers, which allows...

CVE-2012-3967

The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 on Linux, when a large number of sampler uniforms are used, does not properly interact with Mesa drivers, which allows...

WebGL use-after-free and memory corruption — Mozilla

Security researcher miaubiz used the Address Sanitizer tool to discover two WebGL issues. The first issue is a use-after-free when WebGL shaders are called after being destroyed. The second issue exposes a problem with Mesa drivers on Linux, leading to a potentially exploitable crash...

Google Sweetens Bug Bounty Pot

Google officials say that they will be handing out bonuses on top of existing rewards to security researchers who report especially troublesome flaws as part of their bug bounty program. Formally known as the Chromium Vulnerability Rewards Program, Google wrote on the Chromium Blog that a number ...

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerability (2731847)

This host is missing an important security update according to Microsoft Bulletin MS12-055. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerability (2731847)

This host is missing an important security update according to Microsoft Bulletin MS12-055. OpenVAS Vulnerability Test $Id: secpodms12-055.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerability 2731847 Authors: Madhuri D Copyright: Copyright c...

MS12-055: Vulnerability in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2731847)

The remote Windows host is affected by a privilege escalation vulnerability in the kernel-mode drivers due to a use-after-free error. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid61530; scriptversion"1.13"; scriptcvsdate"Date: 2018/11/15 20:50:31";...

Gentoo Security Advisory GLSA 201206-19 (nvidia-drivers)

The remote host is missing updates announced in advisory GLSA 201206-19. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201206-19 (nvidia-drivers)

The remote host is missing updates announced in advisory GLSA 201206-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Ubuntu Update for nvidia-graphics-drivers USN-1523-1

Ubuntu Update for Linux kernel vulnerabilities USN-1523-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN15231.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for nvidia-graphics-drivers USN-1523-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-1523-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : nvidia-graphics-drivers, nvidia-graphics-drivers-173, nvidia-graphics-drivers-173-updates, nvidia-graphics-drivers-updates vulnerability (USN-1523-1)

It was discovered that the NVIDIA graphics drivers could be reconfigured to gain access to arbitrary system memory. A local attacker could use this issue to gain root privileges. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

USN-1523-1: NVIDIA graphics drivers vulnerability

It was discovered that the NVIDIA graphics drivers could be reconfigured to gain access to arbitrary system memory. A local attacker could use this issue to gain root privileges...

Scientific Linux Security Update : Virtio on SL3.x i386/x86_64

This new package provides signed, para-virtualized block and network drivers for Scientific Linux 3 as a KVM virtualized guest. Users may see various warnings during package installation, including : - Different versions of package are already installed. Older versions of the package may cause...

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

CVE-2009-3889 CVE-2009-3939 kernel: megaraidsas permissions in sysfs CVE-2009-3080 kernel: gdth: Prevent negative offsets in ioctl CVE-2009-4005 kernel: isdn: hfcusb: fix read buffer overflow CVE-2009-4020 kernel: hfs buffer overflow This update fixes the following security issues : - an array...

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

Security fixes : - A flaw in sctppacketconfig in the Linux kernel's Stream Control Transmission Protocol SCTP implementation could allow a remote attacker to cause a denial of service. CVE-2010-3432, Important - A missing integer overflow check in sndctlnew in the Linux kernel's sound subsystem...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64

This update fixes the following security issues : - Missing sanity checks in the Intel i915 driver in the Linux kernel could allow a local, unprivileged user to escalate their privileges. CVE-2010-2962, Important - compatallocuserspace in the Linux kernel 32/64-bit compatibility layer...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

These new kernel packages contain fixes for the following security issues : A memory leak was found in the Red Hat Content Accelerator kernel patch. A local user could use this flaw to cause a denial of service memory exhaustion. CVE-2007-5494, Important A flaw was found in the handling of IEEE...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

CVE-2007-4567 kernel: ipv6hopjumbo remote system crash CVE-2009-4537 kernel: r8169 issue reported at 26c3 CVE-2009-4538 kernel: e1000e frame fragment issue CVE-2009-4536 kernel: e1000 issue reported at 26c3 This update fixes the following security issues : - a flaw was found in the IPv6 Extension...

Scientific Linux Security Update : kernel on SL3.x i386/x86_64

There were no new features introduced by this update. The only changes that have been included address critical customer needs or security issues elaborated below. Key areas affected by fixes in this update include the networking subsystem, dcache handling, the ext2 and ext3 file systems, the USB...