Security update for MozillaThunderbird (important)

MozillaThunderbird was updated to 38.7.0 to fix the following issues: Update to Thunderbird 38.7.0 boo969894 MFSA 2015-81/CVE-2015-4477 bmo1179484 Use-after-free in MediaStream playback MFSA 2015-136/CVE-2015-7207 bmo1185256 Same-origin policy violation using performance.getEntries and history...

Security update for graphite2 (important)

This update for graphite2 fixes the following issues: - CVE-2016-1521: The directrun function in directmachine.cpp in Libgraphite did not validate a certain skip operation, which allowed remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service...

CVE-2016-1775

TrueTypeScaler in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file...

CVE-2016-1775

TrueTypeScaler in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file...

CVE-2016-1740

FontParser in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted PDF document...

CVE-2016-1737

Carbon in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted .dfont file...

Memory corruption

TrueTypeScaler in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file...

CVE-2016-1775

TrueTypeScaler in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file...

CVE-2016-1775

CVE-2016-1775 corresponds to a TrueTypeScaler memory corruption issue in Apple’s font processing stack. In affected products (iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, watchOS before 2.2), a crafted font file could lead to arbitrary code execution or memory corruption, i.e., a remote ...

Apple OS X Carbon Memory Corruption Vulnerability

Apple OS X is a proprietary operating system developed by Apple for Mac computers, and Carbon is a compatible API for porting Mac OS programs to the Mac OS X operating system. A security vulnerability exists in Carbon in versions of Apple OS X prior to 10.11.4. The vulnerability can be exploited ...

Apple OS X TTF Remote Code Execution Vulnerability

Apple OS X is an operating system from Apple. A remote code execution vulnerability exists in Apple OS X TTF. The vulnerability stems from a failure to properly handle TTF fonts and bdat tables, allowing an attacker to exploit the vulnerability to elevate privileges and execute arbitrary code...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Adobe Type Manager library on Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a special OpenType font remotely...

Debian DSA-3523-1 : iceweasel - security update

This update disables the Graphite font shaping library in Iceweasel, Debian's version of the Mozilla Firefox web browser. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3523. The text...

[SECURITY] [DSA 3523-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3523-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 20, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3523-1 (iceweasel - security update)

This update disables the Graphite font shaping library in Iceweasel, Debian OpenVAS Vulnerability Test $Id: deb3523.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3523-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2016 Greenbo...

DSA-3523-1 iceweasel - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3523-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 5 / 6 / 7 : thunderbird (CESA-2016:0460)

An updated thunderbird package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Scientific Linux Security Update : thunderbird on SL5.x, SL6.x, SL7.x i386/x86_64 (20160316)

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. CVE-2016-1952, CVE-2016-1954, CVE-2016-1957, CVE-2016-1960,...

The vulnerability of Firefox ESR, the rendering software Graphite 2, and the email client Thunderbird, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Code.cpp function in the Libgraphite component of the Firefox ESR browser and the Graphite 2 rendering software, as well as in the Thunderbird email client, is caused by a buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to cause service...