CVE-2010-0161: Undefined Security Weakness

The nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp in Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 on Windows Vista, Windows Server 2008 R2, and Windows 7 allows remote SMTP, IMAP, and POP servers to cause a denial of service heap memory corruption and applicatio...

Internet Explorer HHCtrl.ocx Image Property Heap Corruption (MS06-046; CVE-2006-3357)

Microsoft Internet Explorer IE is the most widely used web browser application. The browser is capable of processing HTML, images, scripting languages, and various other popular Internet specifications. The browser is also compatible with Microsoft's Common Object Model COM scheme, whereby...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-2052)

Mozilla Firefox was upgraded to version 3.0.18, fixing various bugs and security issues. Following security issues have been fixed: MFSA 2010-01 / CVE-2010-0159: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products...

openSUSE Security Update : seamonkey (seamonkey-2013)

Mozilla SeaMonkey was upgraded to version 2.0.3, fixing various bugs and security issues. Following security issues have been fixed: MFSA 2010-01 / CVE-2010-0159: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-2052)

Mozilla Firefox was upgraded to version 3.0.18, fixing various bugs and security issues. Following security issues have been fixed: MFSA 2010-01 / CVE-2010-0159: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products...

SuSE 11 Security Update : Mozilla XULRunner (SAT Patch Number 2033)

Mozilla XUL Runner engine 1.9.0 was upgraded to version 1.9.0.8, fixing various bugs and security issues. The following security issues have been fixed : - Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some o...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-2017)

Mozilla Firefox was upgraded to version 3.5.8, fixing various bugs and security issues. Following security issues have been fixed: MFSA 2010-01 / CVE-2010-0159: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products...

Memory corruption

The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service heap memory corruption and application crash or possibl...

Mandriva Linux Security Advisory : firefox (MDVSA-2010:042)

Security issues were identified and fixed in firefox 3.0.x and 3.5.x : Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed evidence of memory corruption under certain circumstances and ...

CVE-2010-0160

CVE-2010-0160 affects Mozilla Firefox 3.0.x prior to 3.0.18, Firefox 3.5.x prior to 3.5.8, and SeaMonkey prior to 2.0.3. The issue arises in Web Worker handling of array data types in posted messages, causing heap memory corruption and browser crash; remote attackers could potentially execute arb...

CVE-2010-0160

The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service heap memory corruption and application crash or possibl...

CVE-2010-0160: Undefined Security Weakness

The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service heap memory corruption and application crash or possibl...

Buffer overflow

Buffer overflow in common/util/rlstate.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a RuleBook structure with a large number of rule-separator characters that trigger heap memory corruption...

CVE-2010-0417

Buffer overflow in common/util/rlstate.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a RuleBook structure with a large number of rule-separator characters that trigger heap memory corruption...

CVE-2010-0649

Integer overflow in the CrossCallParamsEx::CreateFromBuffer function in sandbox/src/crosscallserver.cc in Google Chrome before 4.0.249.89 allows attackers to leverage renderer access to cause a denial of service heap memory corruption or possibly have unspecified other impact via a malformed...

CVE-2010-0649

Integer overflow in the CrossCallParamsEx::CreateFromBuffer function in sandbox/src/crosscallserver.cc in Google Chrome before 4.0.249.89 allows attackers to leverage renderer access to cause a denial of service heap memory corruption or possibly have unspecified other impact via a malformed...

Integer overflow

Integer overflow in the CrossCallParamsEx::CreateFromBuffer function in sandbox/src/crosscallserver.cc in Google Chrome before 4.0.249.89 allows attackers to leverage renderer access to cause a denial of service heap memory corruption or possibly have unspecified other impact via a malformed...

CVE-2010-0649

Integer overflow in the CrossCallParamsEx::CreateFromBuffer function in sandbox/src/crosscallserver.cc in Google Chrome before 4.0.249.89 allows attackers to leverage renderer access to cause a denial of service heap memory corruption or possibly have unspecified other impact via a malformed...

CVE-2010-0649

CVE-2010-0649 affects Google Chrome prior to 4.0.249.89. The vulnerability lies in the sandbox’s CrossCallParamsEx::CreateFromBuffer (sandbox/src/crosscall_server.cc) where an integer overflow during deserialization of sandbox messages can lead to renderer-accessible heap memory corruption and a ...

CVE-2010-0417: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in common/util/rlstate.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a RuleBook structure with a large number of rule-separator characters that trigger heap memory corruption...