CVE-2017-7813

Inside the JavaScript parser, a cast of an integer to a narrower type can result in data read from outside the buffer being parsed. This usually results in a non-exploitable crash, but can leak a limited amount of information from memory if it matches JavaScript identifier syntax. This...

Mozilla Firefox JavaScript Parser Denial of Service Vulnerability

Mozilla Firefox is the United States Mozilla Foundation developed an open source Web browser . JavaScript parser is one of the JavaScript parser . A security vulnerability exists in the JavaScript parser in versions of Mozilla Firefox prior to 56. A remote attacker could exploit this vulnerabilit...

Security vulnerabilities fixed in Firefox 56 — Mozilla

A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially exploitable crash. A spoofing vulnerability can occur when a page switches to fullscreen mode without user notification, allowing a fake addre...

Microsoft Edge: Chakra: Uninitialized arguments(CVE-2017-8640)

Here's a snippet of "ParseVariableDeclaration" which is used for parsing declarations. template ParseNodePtr Parser::ParseVariableDeclaration tokens declarationType, charcountt ichMin, BOOL fAllowIn/ = TRUE/, BOOL pfForInOk/ = nullptr/, BOOL singleDefOnly/ = FALSE/, BOOL allowInit/ = TRUE/, BOOL...

Debian DLA-69-1 : exuberant-ctags security update

Stefano Zacchiroli discovered that certain JavaScript input files cause ctags to enter an infinite loop until it runs out of disk space. This update fixes the JavaScript parser. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory...

[SECURITY] [DLA 69-1] exuberant-ctags security update

Package : exuberant-ctags Version : 1:5.8-3squeeze2 CVE ID : CVE-2014-7204 Debian Bug : 742605 Stefano Zacchiroli discovered that certain JavaScript input files cause ctags to enter an infinite loop until it runs out of disk space. This update fixes the JavaScript parser...

DLA-69-1 exuberant-ctags - security update

Bulletin has no description...