CVE-2020-7626

CVE-2020-7626 affects the npm package karma-mojo up to version 1.0.1. The vulnerability is a Command Injection due to unsanitized input in the config argument, allowing an attacker to execute arbitrary commands. Multiple connected sources corroborate the issue and identify the impact as arbitrary...

CVE-2020-7626: Improper Neutralization of Special Elements used in an OS Command

karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument...

Command Injection

Overview karma-mojo is a plugin for Karma that provides a binary for running only a select subset of tests at a time instead of running the whole test suite. Affected versions of this package are vulnerable to Command Injection. The argument config can be controlled by users without any...

PT-2020-19663

Name of the Vulnerable Software and Affected Versions karma-mojo versions 1.0.0 through 1.0.1 Description The issue allows execution of arbitrary commands via the config argument, enabling Command Injection attacks. Recommendations For karma-mojo versions 1.0.0 through 1.0.1, consider restricting...

Escaping the Chrome Sandbox with RIDL

Guest blog post by Stephen Röttger tl;dr: Vulnerabilities that leak cross process memory can be exploited to escape the Chrome sandbox. An attacker is still required to compromise the renderer prior to mounting this attack. To protect against attacks on affected CPUs make sure your microcode is u...

The vulnerability of the Mojo messaging library in Google Chrome allows a hacker to elevate their privileges and escape from the isolated software environment.

The vulnerability of the Mojo messaging library in Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and escape from an isolated software environment using a specially created HTML page...

DEBIAN-CVE-2019-5872

Use after free in Mojo in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Design/Logic Flaw

Use after free in Mojo in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

UBUNTU-CVE-2019-5872

Use after free in Mojo in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2019-5872

Use after free in Mojo in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2019-5872

Use after free in Mojo in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2019-5872

CVE-2019-5872 describes a use-after-free in Chrome’s Mojo component that could be triggered by a crafted HTML page, potentially allowing heap corruption. Affected: Google Chrome (Mojo path), version before 77.0.3865.75. Exploitation details, specific impact, and exact remediation are not provided...

CVE-2019-5872: Use After Free

Use after free in Mojo in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

chromium-browser: Use-after-free in Mojo

Use after free in Mojo in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2019-5872

Use after free in Mojo in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

openSUSE Security Update : chromium (openSUSE-2019-2152)

This update for chromium to 77.0.3865.75 fixes the following issues : Security issues fixed : - CVE-2019-5870: Fixed a use-after-free in media. boo1150425 - CVE-2019-5871: Fixed a heap overflow in Skia. boo1150425 - CVE-2019-5872: Fixed a use-after-free in Mojo boo1150425 - CVE-2019-5874: Fixed a...

openSUSE: Security Advisory for chromium (openSUSE-SU-2019:2153-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:2153-1 Rating: important References: 1150425 Cross-References: CVE-2019-13659 CVE-2019-13660 CVE-2019-13661 CVE-2019-13662 CVE-2019-13663 CVE-2019-13664 CVE-2019-13665 CVE-2019-13666 CVE-2019-13667...

Google Chrome Mojo Resource Management Error Vulnerability

Google Chrome is a web browser. A security vulnerability in Google Chrome Mojo allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing by users, which can crash applications or execute arbitrary code...

PT-2019-5088

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 77.0.3865.75 Description The issue is related to a use after free in the Mojo library, which can lead to heap corruption. A remote attacker can potentially exploit this issue via a crafted HTML page, causing a...