6519 matches found
Google Chrome < 2.0.172.37 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 2.0.172.37. Such versions are reportedly affected by multiple issues : - A heap overflow exists when evaluating specially crafted regular expressions in JavaScript. This could lead to a denial of service or the execution of...
CVE-2009-1442
Multiple integer overflows in Skia, as used in Google Chrome 1.x before 1.0.154.64 and 2.x, and possibly Android, might allow remote attackers to execute arbitrary code in the renderer process via a crafted 1 image or 2 canvas...
Google Chrome < 1.0.154.64 Multiple Overflows
The version of Google Chrome installed on the remote host is earlier than 1.0.154.64. Such versions are reportedly affected by multiple vulnerabilities : - A failure to properly validate input from a renderer tab process could allow an attacker to crash the browser and possibly run arbitrary code...
MDVA-2008:179 : graphviz
The graphviz package shipped in Mandriva Linux 2008.1 has a bug in its builtin ps renderer: included images are displayed as blank area. An upstream patch fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...
Mandriva Update for graphviz MDVA-2008:179 (graphviz)
Check for the Version of graphviz OpenVAS Vulnerability Test Mandriva Update for graphviz MDVA-2008:179 graphviz Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Mandriva Update for graphviz MDVA-2008:179 (graphviz)
Check for the Version of graphviz OpenVAS Vulnerability Test Mandriva Update for graphviz MDVA-2008:179 graphviz Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
XSS in the Widget Connector
I've been working with the widget connector today and reading through the code when I noticed that the media uris are not being handled securely. try this: widget:url=youtube.com/v="alert'xss' In general there is not a unified way to prevent issues like this in the widget extensions and it is up ...
XSS in the Widget Connector
I've been working with the widget connector today and reading through the code when I noticed that the media uris are not being handled securely. try this: widget:url=youtube.com/v="alert'xss' In general there is not a unified way to prevent issues like this in the widget extensions and it is up ...
XSS in the Widget Connector
I've been working with the widget connector today and reading through the code when I noticed that the media uris are not being handled securely. try this: widget:url=youtube.com/v="alert'xss' In general there is not a unified way to prevent issues like this in the widget extensions and it is up ...
CVE-2008-5749
CVE-2008-5749 affects Google Chrome 1.0.154.36 on Windows XP SP3 and is an argument-injection vulnerability in the chromehtml URI via the --renderer-path option, enabling remote command execution. OpenVAS entries corroborate a Google Chrome argument-injection vulnerability; the core issue is the ...
PT-2008-6799 · Google · Google Chrome
Name of the Vulnerable Software and Affected Versions: Google Chrome version 1.0.154.36 Description: The issue allows remote attackers to execute arbitrary commands via the --renderer-path option in a "chromehtml: URI" API endpoint. A third party disputes this issue, stating that Chrome will ask...
Debian Security Advisory DSA 1039-1 (blender)
The remote host is missing an update to blender announced via advisory DSA 1039-1. Several vulnerabilities have been discoverd in in blender, a very fast and versatile 3D modeller/renderer. The Common Vulnerability and Exposures Project identifies the following problems: CVE-2005-3302 Joxean Kore...
USN-473-1: libgd2 vulnerabilities
A buffer overflow was discovered in libgd2's font renderer. By tricking an application using libgd2 into rendering a specially crafted string with a JIS encoded font, a remote attacker could read heap memory or crash the application, leading to a denial of service. CVE-2007-0455 Xavier Roche...
X.org / XFree68 multiple integer overflows
Integer overflow in DBE and Renderer extensions...
Brim <= 1.2.1 (renderer) Multiple Remote File Include Vulnerabilities
No description provided by source. Brim 1.2.0pre3 , 1.2.1 renderer Remote File Include Vulnerability Turkish Hacker's Discovered By : mdx and TheBatHacker ------------------------------------------------------ Cyber-Warrior TIM Ay ve Y.ld.zlar Geceye Yak...r... the moon and the stars suit the nig...
Brim 1.2.1 - renderer Multiple Remote File Inclusions
Brim 1.2.1 - renderer Multiple Remote File Inclusions Brim 1.2.0pre3 , 1.2.1 renderer Remote File Include Vulnerability Turkish Hacker's Discovered By : mdx and TheBatHacker ------------------------------------------------------ Cyber-Warrior TIM Ay ve Y.ld.zlar Geceye Yak...r... the moon and the...
Debian DSA-1039-1 : blender - several vulnerabilities
Several vulnerabilities have been discovered in blender, a very fast and versatile 3D modeller/renderer. The Common Vulnerabilities and Exposures Project identifies the following problems : - CVE-2005-3302 Joxean Koret discovered that due to missing input validation a provided script is vulnerabl...
[Full-Disclosure] Novell/Ximian Evolution multiple text attachments DoS
================== =====Analysis===== ================== I just wanted to inform users of Ximian Evolution 2.0 software that there exists a way to temporarily DoS the local application and/or machine by attaching an absurd amount of .ezm files to a normal email. It seems that Evolution tries to...
PT-2004-1122 · Google +3 · Google Chrome +3
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 131.0.6778.69 Description: The issue is related to a use after free problem in the Accessibility component of Google Chrome, which can be exploited by a remote attacker who has compromised the renderer process...