Mozilla Firefox Sensitive Information Disclosure Vulnerability (CNVD-2016-08177)

Mozilla Firefox is an open source web browser. Mozilla Firefox fails to properly restrict the 'scheme' parameter in web icon requests, allowing remote attackers to exploit the vulnerability to build malicious web pages that can be parsed by users, which can be used to obtain sensitive information...

How to Change Desktop Icon for All Delivery Groups

This document outlines how to change Desktop Icon for All Delivery Groups in XD 7.X using storefront 2.X or 3.X. Changes If you are publishing both XenApp desktops and XenDesktop desktops you may want to change the default Xendesktop Icon to Custom Icon. XenDesktop desktop has the default icon as...

Mozilla Firefox and Firefox ESR Information Disclosure Vulnerability

Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. Mozilla Firefox and Firefox ESR programs retain network connections for icon resource retrieval after the browser window is closed, allowing remote attackers to exploit this vulnerability to trac...

Atutor Arbitrary File Disclosure Vulnerability

ATutor is ATutor team developed a set of open source Web-based learning content management system . An arbitrary file disclosure vulnerability exists in Atutor. When saving data information, due to the "icon" HTTP POST passed to the "/mods/core/courses/users/createcourse.php" script, which fails ...

Fedora Update for oxygen-icon-theme FEDORA-2016-cef912e3a4

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for oxygen-icon-theme FEDORA-2016-4701636a74

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Memory Corruption Vulnerability in PhotoZoom's Handling of ICO Files

PhotoZoom is a novel and technically revolutionary tool for enlarging digital images. A memory corruption vulnerability exists in the tool's handling of ICO images, which could be exploited by attackers to construct malformed ICO images that could cause the program to crash...

Fedora Update for breeze-icon-theme FEDORA-2016-cef912e3a4

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for breeze-icon-theme FEDORA-2016-4701636a74

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

LastPass Patches Ormandy Remote Compromise Flaw

LastPass has patched a vulnerability in its Firefox add-on found by Google Project Zero researcher Tavis Ormandy that allows attackers complete remote compromise of the password manager, . The divisive Ormandy submitted a bug report on Tuesday to LastPass after a series of tweets hinting at serio...

UBUNTU-CVE-2016-6352

The OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a denial of service out-of-bounds write and crash via crafted dimensions in an ICO file...

Fedora 24 : 1:oxygen-icon-theme / breeze-icon-theme / extra-cmake-modules / kf5 / etc (2016-4701636a74)

KDE Frameworks 5.24, see also see also https://www.kde.org/announcements/kde-frameworks-5.24.0.php Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

[SECURITY] Fedora 23 Update: oxygen-icon-theme-5.24.0-1.fc23

Oxygen icon theme...

[SECURITY] Fedora 23 Update: breeze-icon-theme-5.24.0-1.fc23

Breeze icon theme...

[SECURITY] Fedora 24 Update: breeze-icon-theme-5.24.0-1.fc24

Breeze icon theme...

[SECURITY] Fedora 24 Update: oxygen-icon-theme-5.24.0-1.fc24

Oxygen icon theme...

[SECURITY] Fedora 24 Update: kf5-kiconthemes-5.24.0-1.fc24

KDE Frameworks 5 Tier 3 integration module with icon themes...

The vulnerability of the Firefox browser, which allows a malicious actor to compromise the integrity and accessibility of protected information

The vulnerability exists in Mozilla Firefox due to an incorrect limitation on event handling, which replaces events related to configuration changes. Exploiting this vulnerability allows malicious actors to remotely alter the positions of icons on the user interface by using specially crafted...

Nextcloud: Stored XSS on Share-popup of a directory's Gallery-view

Hi, Nice with the program launch! Congrats! I noticed that there was a Share-icon when toggling to the Gallery-view of a directory under "Nextcloud Files": F99938 If your directory has a malicious name such as a HTML-payload: , this HTML will run when clicking on the Share-icon: F99937 I see that...

ImageMagick: Integer and buffer overflow in coders/icon.c

Integer overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote attackers to cause a denial of service application crash via a crafted length value, which triggers a buffer overflow...