CVE-2011-2601

The GPU support functionality in Mac OS X does not properly restrict rendering time, which allows remote attackers to cause a denial of service desktop hang via vectors involving WebGL and 1 shader programs or 2 complex 3D geometry, as demonstrated by using Mozilla Firefox or Google Chrome to vis...

USN-1162-1: Linux kernel vulnerabilities (Marvell Dove)

Brad Spengler discovered that the kernel did not correctly account for userspace memory allocations during exec calls. A local attacker could exploit this to consume all system memory, leading to a denial of service. CVE-2010-4243 Alexander Duyck discovered that the Intel Gigabit Ethernet driver...

Mozilla Firefox WebGL越界读取信息泄露漏洞

BUGTRAQ ID: 48371 CVE ID: CVE-2011-2366 Firefox是一款非常流行的开源WEB浏览器。 Mozilla Firefox在实现上存在信息泄露漏洞，远程攻击者可利用此漏洞绕过同源策略并获取敏感信息。 WebGL代码中存在两个崩溃。一个是由于越界读取，可被利用从在GPU中存储数据的其他进程中读取数据。第二个崩溃是由于无效写入，可被利用执行任意代码。 Mozilla Firefox 4.0.x Mozilla Firefox 3.x Mozilla Thunderbird 3.x Mozilla Thunderbird 2.x Mozilla...

CVE-2011-2367

The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict read operations, which allows remote attackers to obtain sensitive information from GPU memory associated with an arbitrary process, or cause a denial of service application crash, via unspecified vectors...

Ubuntu: Security Advisory (USN-1157-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Multiple WebGL crashes — Mozilla

Mozilla security researcher Christoph Diehl reported two crashes in WebGL code. One crash was the result of an out-of-bounds read and could be used to read data from other processes who had stored data in the GPU. The severity of this issue was determined to be high. The second crash was the resu...

Ubuntu 10.04 LTS : linux, linux-ec2 vulnerabilities (USN-1141-1)

Brad Spengler discovered that the kernel did not correctly account for userspace memory allocations during exec calls. A local attacker could exploit this to consume all system memory, leading to a denial of service. CVE-2010-4243 Alexander Duyck discovered that the Intel Gigabit Ethernet driver...

Google Chrome < 11.0.696.71 Multiple Vulnerabilities (May 2011) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome Multiple Vulnerabilities May11 (Windows)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnmay11win.nasl 7029 2017-08-31 11:51:40Z teissa $ Google Chrome Multiple Vulnerabilities May11 Windows Authors: Madhuri D Copyright: Copyright c 2011 SecPod...

USN-1141-1: Linux kernel vulnerabilities

Brad Spengler discovered that the kernel did not correctly account for userspace memory allocations during exec calls. A local attacker could exploit this to consume all system memory, leading to a denial of service. CVE-2010-4243 Alexander Duyck discovered that the Intel Gigabit Ethernet driver...

CVE-2011-1806

Google Chrome before 11.0.696.71 does not properly implement the GPU command buffer, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

Command injection

Google Chrome before 11.0.696.71 does not properly implement the GPU command buffer, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

UBUNTU-CVE-2011-1806

Google Chrome before 11.0.696.71 does not properly implement the GPU command buffer, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2011-1806

Google Chrome before 11.0.696.71 does not properly implement the GPU command buffer, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2011-1806

Google Chrome before 11.0.696.71 does not properly implement the GPU command buffer, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2011-1806

The provided connected sources confirm CVE-2011-1806 affects Google Chrome prior to 11.0.696.71, where improper GPU command buffer handling can allow remote attackers to execute arbitrary code or cause a denial of service via memory corruption. The vulnerability is tied to the GPU command buffer ...

CVE-2011-1806

Removed by vendor...

Google Chrome GPU命令缓冲区内存破坏漏洞

Bugtraq ID: 47964 CVE ID：CVE-2011-1806 Google Chrome是一款流行的WEB浏览器。 Google Chrome GPU命令缓冲区中存在一个内存破坏漏洞，远程攻击者可以构建恶意WEB页，诱使用户解析，可能以应用程序上下文执行任意代码。 Google Chrome 9.0.597.94 Google Chrome 9.0.597.84 Google Chrome 9.0.597.107 Google Chrome 8.0.552.344 Google Chrome 8.0.552.310 Google Chrome 8.0.552.309...

Google Chrome < 11.0.696.71 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 11.0.696.71. Such versions of Chrome are affected by multiple vulnerabilities: - An unspecified error allows the pop-up blocker to be bypassed. Issue 72189 - A stale pointer can be left behind when floating point numbers ar...

RHEL 6 : kernel (RHSA-2011:0498)

Updated kernel packages that fix several security issues, various bugs, and add an enhancement are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, whic...