kernel: b43: allocate receive buffers big enough for max frame len + offset

The dmarx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service system crash via a crafted frame...

Stable Channel Update

The Stable channel has been updated to 16.0.912.75 for Windows, Mac, Linux and Chrome Frame Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix $1000 106672...

Unfixed Frame Redirect vulnerability at www.elebda3.net

Security researcher p0pc0rn, has submitted on 24/12/2011 a Frame Redirect vulnerability affecting www.elebda3.net, which at the time of submission ranked 60799 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currently unfixed...

Unfixed Frame Redirect vulnerability at www.teacherplanet.com

Security researcher p0pc0rn, has submitted on 24/12/2011 a Frame Redirect vulnerability affecting www.teacherplanet.com, which at the time of submission ranked 287229 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currently...

Unfixed Frame Redirect vulnerability at deperiodistas.com

Security researcher p0pc0rn, has submitted on 24/12/2011 a Frame Redirect vulnerability affecting deperiodistas.com, which at the time of submission ranked 667889 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currently...

Unfixed Frame Redirect vulnerability at www.filmhill.com

Security researcher p0pc0rn, has submitted on 24/12/2011 a Frame Redirect vulnerability affecting www.filmhill.com, which at the time of submission ranked 700694 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is currently unfixe...

Unfixed Frame Redirect vulnerability at securityphresh.com

Security researcher Snypter Dhruv, has submitted on 23/12/2011 a Frame Redirect vulnerability affecting securityphresh.com, which at the time of submission ranked 1573986 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2011. It is current...

Unfixed Frame Redirect vulnerability at vyoms.com

Security researcher p0pc0rn, has submitted on 22/12/2011 a Frame Redirect vulnerability affecting vyoms.com, which at the time of submission ranked 60001 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/12/2011. It is currently unfixed. If yo...

Mozilla Products DOM Frame Denial of Service Vulnerability (MAC OS X)

The host is installed with Mozilla firefox/thunderbird and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodmozillaprdtsdomframedosvulnmacosx.nasl 7024 2017-08-30 11:51:43Z teissa $ Mozilla Products DOM Frame Denial of Service Vulnerability MAC OS X Authors:...

Microsoft Windows win32k.sys memory corruption

Integer overflow on the frame with large height...

Mozilla Products DOM Frame Denial of Service Vulnerability - Mac OS X

Mozilla Firefox/Thunderbird is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-3664

Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not properly handle certain DOM frame deletions by plugins, which allows remote attackers to cause a denial of service incorrect pointer dereference and application crash or possibly have unspecified other...

CVE-2011-3664

Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not properly handle certain DOM frame deletions by plugins, which allows remote attackers to cause a denial of service incorrect pointer dereference and application crash or possibly have unspecified other...

CVE-2011-3664

Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not properly handle certain DOM frame deletions by plugins, which allows remote attackers to cause a denial of service incorrect pointer dereference and application crash or possibly have unspecified other...

Thunderbird 8.x Multiple Vulnerabilities (Mac OS X)

The installed version of Thunderbird 8.x is potentially affected by the following security issues : - An out-of-bounds memory access error exists in the 'SVG' implementation and can be triggered when 'SVG' elements are removed during a 'DOMAttrModified' event handler. CVE-2011-3658 - Various memo...

Crash when plugin removes itself on Mac OS X — Mozilla

FireBreath developer Richard Bateman reported a crash on Mac OS X that occurred when a plugin deletes its containing DOM frame during a call from that frame. The observed symptom is a null dereference but we cannot rule out the possibility that content from a scriptable plugin such as Flash could...

CVE-2011-3359

The dmarx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service system crash via a crafted frame...

FreeBSD : chromium -- multiple vulnerabilities (68ac6266-25c3-11e1-b63a-00262d5ed8ee)

Google Chrome Releases reports : 81753 Medium CVE-2011-3903: Out-of-bounds read in regex matching. Credit to David Holloway of the Chromium development community. 95465 Low CVE-2011-3905: Out-of-bounds reads in libxml. Credit to Google Chrome Security Team Inferno. 98809 Medium CVE-2011-3906:...

ClickIt Proof Of Concept

X-Frame-Options is worth less than you think var w; var dummy; var it; // Precache stuff. x = new Image; x.src = 'http://banking.beaver-peak.us/bankinginterface/transfers/'; x2 = new Image; x2.src = 'http://banking.beaver-peak.us/bankinginterface/transfers/beaver-peak.jpg'; x3 = new Image; x3.src...

Stable Channel Update

The Google Chrome team is happy to announce the arrival of Chrome 16.0.912.63 to the Stable Channel for Windows, Mac, Linux, and Chrome Frame. Chrome 16 contains some really great improvements including enhancements to Sync and the ability to create multiple profiles on a single instance of Chrom...