Ubuntu: Security Advisory (USN-2757-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu oxide-qt Package heap buffer overflow vulnerability

Ubuntu is a GNU/Linux operating system with a focus on desktop applications. ubuntu oxide-qt is one of the web browser engine libraries for Qt. A heap buffer overflow vulnerability exists in the Ubuntu oxide-qt Package, which allows an attacker to exploit the vulnerability to crash an application...

Desktop Client: Improper validation of certificates when using self-signed certificates

The ownCloud Desktop Client was vulnerable against MITM attacks until version 2.0.0 in combination with self-signed certificates. To be exploitable the following conditions have to be met: The connection to the remote ownCloud server must be secured using a self-signed certificate which the user...

Improper validation of certificates when using self-signed certificates - ownCloud

The ownCloud Desktop Client was vulnerable against MITM attacks until version 2.0.0 in combination with self-signed certificates. To be exploitable the following conditions have to be met: The connection to the remote ownCloud server must be secured using a self-signed certificate which the user...

USN-2735-1: Oxide vulnerabilities

It was discovered that the DOM tree could be corrupted during parsing in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass same-origin restrictions or cause a denial of service. CVE-2015-1291 An issue was...

CVE-2015-1332

The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.04 allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted website...

PT-2015-5216

Name of the Vulnerable Software and Affected Versions oxide-qt versions prior to 1.9.1 Description The issue allows remote attackers to cause a denial of service or execute arbitrary code via a crafted website, exploiting the oxide::JavaScriptDialogManager function. Recommendations For versions...

Ubuntu oxide-qt Package Remote Code Execution Vulnerability

Ubuntu is a GNU/Linux operating system for desktop applications developed by Canonical and the Ubuntu Foundation, and Ubuntu oxide-qt is a web browser engine library for the Qt C++ application development framework. A remote code execution vulnerability exists in the Ubuntu oxide-qt Package. An...

SUSE SLED12 / SLES12 Security Update : libqt4 (SUSE-SU-2015:1359-1)

The libqt4 library was updated to fix several security and non security issues. The following vulnerabilities were fixed : - bsc921999: CVE-2015-0295: division by zero when processing malformed BMP files - bsc927806: CVE-2015-1858: segmentation fault in BMP Qt Image Format Handling - bsc927807:...

Ubuntu: Security Advisory (USN-2677-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2677-1: Oxide vulnerabilities

An uninitialized value issue was discovered in ICU. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service. CVE-2015-1270 A use-after-free was discovered in the GPU process implementation in Chromium. If a user wer...

PT-2017-6481

Name of the Vulnerable Software and Affected Versions oxide-qt versions 15.04 and 14.04 LTS Description A use-after-free issue in oxide::qt::URLRequestDelegatedJob might allow remote attackers to execute arbitrary code. Recommendations For versions 15.04 and 14.04 LTS, at the moment, there is no...

CVE-2015-1329

Use-after-free vulnerability in oxide::qt::URLRequestDelegatedJob in oxide-qt in Ubuntu 15.04 and 14.04 LTS might allow remote attackers to execute arbitrary code...

UBUNTU-CVE-2015-1329

Use-after-free vulnerability in oxide::qt::URLRequestDelegatedJob in oxide-qt in Ubuntu 15.04 and 14.04 LTS might allow remote attackers to execute arbitrary code...

PT-2020-7913

Name of the Vulnerable Software and Affected Versions: Qt versions prior to 5.15 Description: The issue allows for an exponential XML entity expansion attack. This can occur via a crafted SVG document that is mishandled in QXmlStreamReader. Recommendations: For Qt versions prior to 5.15, update t...

John the Ripper GUI Frontend: Johnny

Johnny the open source cross-platform GUI frontend for John the Ripper, the popular password cracker, written in C++ using the Qt framework. Johnny’s aim is to automate and simplify the password cracking routine on the Desktop as well as add extra functionality like session management and easy...

Apple QuickTime Remote Memory Corruption Vulnerability

Apple QuickTime is a multimedia playback software developed by Apple. The program is capable of handling a wide range of resources such as digital video, media passages, and more. A security vulnerability exists in QT Media Foundation in Apple QuickTime versions prior to 7.7.7. A remote attacker...

Fedora Update for qt FEDORA-2015-2866

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for qt FEDORA-2015-6123

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unspecified Vulnerability in Apple QuickTime QT Media Foundation (CNVD-2015-04328)

Apple QuickTime is a multimedia playback software developed by Apple. The program is capable of handling a wide range of resources such as digital video, media passages, and more. A security vulnerability exists in QT Media Foundation in Apple QuickTime versions prior to 7.7.7. The vulnerability...