418 matches found
WebRTC - VP9 Missing Frame Processing Out-of-Bounds Memory Access Exploit
Exploit for multiple platform in category dos / poc There is a missing check in VP9 frame processing that could lead to memory corruption. In the file videocoding/rtpframereferencefinder.cc, the function RtpFrameReferenceFinder::MissingRequiredFrameVp9 contains the following code: sizet temporali...
WebRTC - VP9 Missing Frame Processing Out-of-Bounds Memory Access
There is a missing check in VP9 frame processing that could lead to memory corruption. In the file videocoding/rtpframereferencefinder.cc, the function RtpFrameReferenceFinder::MissingRequiredFrameVp9 contains the following code: sizet temporalidx = info.gof-temporalidxgofidx; ... for sizet l = 0...
Xxe
Multiple XML external entity XXE vulnerabilities in 1 CQWeb / CM Server, 2 ClearQuest Native client, 3 ClearQuest Eclipse client, and 4 ClearQuest Eclipse Designer components in IBM Rational ClearQuest 7.1.1 through 7.1.1.9, 7.1.2 through 7.1.2.13, 8.0.0 through 8.0.0.10, and 8.0.1 through 8.0.1....
PT-2018-4133
Name of the Vulnerable Software and Affected Versions IBM Rational ClearQuest versions 7.1.1 through 7.1.1.9 IBM Rational ClearQuest versions 7.1.2 through 7.1.2.13 IBM Rational ClearQuest versions 8.0.0 through 8.0.0.10 IBM Rational ClearQuest versions 8.0.1 through 8.0.1.3 Description The issue...
CVE-2014-0950: Improper Restriction of XML External Entity Reference
Multiple XML external entity XXE vulnerabilities in 1 CQWeb / CM Server, 2 ClearQuest Native client, 3 ClearQuest Eclipse client, and 4 ClearQuest Eclipse Designer components in IBM Rational ClearQuest 7.1.1 through 7.1.1.9, 7.1.2 through 7.1.2.13, 8.0.0 through 8.0.0.10, and 8.0.1 through 8.0.1....
[SECURITY] Fedora 24 Update: chromium-native_client-59.0.3071.86-1.20170607gitaac1de2.fc24
Google's "pnacl" toolchain for native client support in Chromium. Depends on their older "nacl" toolchain, packaged separately...
[SECURITY] Fedora 25 Update: chromium-native_client-59.0.3071.86-1.20170607gitaac1de2.fc25
Google's "pnacl" toolchain for native client support in Chromium. Depends on their older "nacl" toolchain, packaged separately...
[SECURITY] Fedora 26 Update: chromium-native_client-59.0.3071.86-1.20170607gitaac1de2.fc26
Google's "pnacl" toolchain for native client support in Chromium. Depends on their older "nacl" toolchain, packaged separately...
[SECURITY] Fedora 26 Update: chromium-native_client-58.0.3029.81-1.20170421gitc948e9b.fc26
Google's "pnacl" toolchain for native client support in Chromium. Depends on their older "nacl" toolchain, packaged separately...
[SECURITY] Fedora 24 Update: chromium-native_client-58.0.3029.81-1.20170421gitc948e9b.fc24
Google's "pnacl" toolchain for native client support in Chromium. Depends on their older "nacl" toolchain, packaged separately...
[SECURITY] Fedora 25 Update: chromium-native_client-58.0.3029.81-1.20170421gitc948e9b.fc25
Google's "pnacl" toolchain for native client support in Chromium. Depends on their older "nacl" toolchain, packaged separately...
Fedora Update for chromium-native_client FEDORA-2016-c671aae490
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 25 Update: chromium-native_client-54.0.2840.59-1.20161013git090f907.fc25
Google's "pnacl" toolchain for native client support in Chromium. Depends on their older "nacl" toolchain, packaged separately...
[SECURITY] Fedora 24 Update: chromium-native_client-54.0.2840.59-1.20161013git090f907.fc24
Google's "pnacl" toolchain for native client support in Chromium. Depends on their older "nacl" toolchain, packaged separately...
CVE-2015-3335
Removed by vendor...
Google Chrome < 42.0.2311.90 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 42.0.2311.90. It is, therefore, affected by multiple vulnerabilities as referenced in the 201504stable-channel-update14 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.90 allow attackers...
Google Chrome < 42.0.2311.90 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 42.0.2311.90. It is, therefore, affected by multiple vulnerabilities as referenced in the 201504stable-channel-update14 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.90 allow attacke...
How To Run Android Apps in Chrome Browser with Google ARC
Last year at Google I/O developer event, Google launched a limited beta "App Runtime for Chrome" ARC project, which now expanded to run millions of Android apps within Chrome browser. Google has released a new developer tool called App Runtime for Chrome ARC Welder that allows Android apps to run...
DRAM Rowhammer vulnerability Leads to Kernel Privilege Escalation
Security researchers have find out ways to hijack the Intel-compatible PCs running Linux by exploiting the physical weaknesses in certain varieties of DDR DRAM double data rate dynamic random-access memory chips and gaining higher kernel privileges on the system. The technique, dubbed "rowhammer"...
Rowhammer - NaCl Sandbox Escape
Rowhammer - NaCl Sandbox Escape Sources: http://googleprojectzero.blogspot.ca/2015/03/exploiting-dram-rowhammer-bug-to-gain.html https://code.google.com/p/google-security-research/issues/detail?id=284 Full PoC:...