377 matches found
Mozilla: Incorrect instruction reordering during JIT optimization
Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered during garbage collection. This led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 78.13, Thunderbird 91, Firefox ESR 78.13, and...
The vulnerability of the Mozilla Firefox browser, which allows a hacker to execute arbitrary code on the target system
The vulnerability of the Mozilla Firefox browser is related to a boundary error during JIT optimization. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system, as well as cause memory corruption...
Mozilla Firefox 缓冲区错误漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a buffer error vulnerability that stems from incorrect instruction reordering during JIT optimization...
Mozilla Firefox和Mozilla Thunderbird输入验证错误漏洞
Mozilla Firefox and Mozilla Thunderbird are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source Web browser. Mozilla Thunderbird is a separate set of email client software. The software supports IMAP and POP email protocols as well as HTML email formats. Mozilla...
DEBIAN-CVE-2021-29945
The WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and result in a crash. Note: This issue only affected x86-32 platforms. Other platforms are unaffected.. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...
BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c.
...
UBUNTU-CVE-2021-29154
BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpfjitcomp.c and arch/x86/net/bpfjitcomp32.c...
pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode
An out-of-bounds read was discovered in PCRE when the pattern "\X" is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to crash the application...
Best practices for defending Azure Virtual Machines
One of the things that our Detection and Response Team DART and Customer Service and Support CSS security teams see frequently during investigation of customer incidents are attacks on virtual machines from the internet. This is one area in the cloud security shared responsibility model where...
USN-4501-1: LuaJIT vulnerability
It was discovered that an out-of-bounds read existed in LuaJIT. An attacker could use this to cause a denial of service application crash or possibly expose sensitive information. CVE-2020-15890...
CVE-2020-15656
JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. This vulnerability affects Firefox ESR 78.1, Firefox 79, and Thunderbird 78.1...
Debian: Security Advisory (DLA-2296-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
UBUNTU-CVE-2019-20838
libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454...
Defending the power grid against supply chain attacks: Part 3 – Risk management strategies for the utilities industry
Over the last fifteen years, attacks against critical infrastructure figure1 have steadily increased in both volume and sophistication. Because of the strategic importance of this industry to national security and economic stability, these organizations are targeted by sophisticated, patient, and...
Enable remote work while keeping cloud deployments secure
As our customers shift to remote work in response to the COVID-19 outbreak, many have asked how to maintain the security posture of their cloud assets. Azure Security Center security controls can help you monitor your security posture as usage of cloud assets increases. These are three common...
Defending the power grid against supply chain attacks—Part 2: Securing hardware and software
Artificial intelligence AI and connected devices have fueled digital transformation in the utilities industry. These technological advances promise to reduce costs and increase the efficiency of energy generation, transmission, and distribution. They’ve also created new vulnerabilities...
The vulnerability of the IonMonkey Just-In-Time compiler in Thunderbird email clients, as well as in Firefox and Firefox ESR browsers, stems from incorrect type conversion. This allows attackers to trigger a service failure.
The vulnerability of the IonMonkey Just-In-Time compiler for Thunderbird email clients, as well as for Firefox and Firefox ESR browsers, is related to incorrect type conversion. Exploiting this vulnerability can allow a remote attacker to cause service interruptions through the use of specially...
Mitigating Modern Insider Threats in FIs
More and more financial institutions FI are migrating to the cloud—increasing efficiencies and access to services. With this move, however, comes a new degree of risk. Without the right levels of protection and visibility, you leave yourself open not only to attacks by external actors but interna...
How to Scale Addressable Advertising with Low Latency for Live Streaming
Written by: David Springfall, Founder and CTO of Yospace Under David's technical and strategic leadership, Yospace pioneered server-side ad insertion and established itself as the global leader in OTT stream monetisation. The Yospace technology supports full one-to-one personalisation and provide...
