9724 matches found
Google Chrome < 2.0.172.37 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 2.0.172.37. Such versions are reportedly affected by multiple issues : - A heap overflow exists when evaluating specially crafted regular expressions in JavaScript. This could lead to a denial of service or the execution of...
CVE-2009-1442
Multiple integer overflows in Skia, as used in Google Chrome 1.x before 1.0.154.64 and 2.x, and possibly Android, might allow remote attackers to execute arbitrary code in the renderer process via a crafted 1 image or 2 canvas...
CVE-2009-1441: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in the ParamTraits ::Read function in Google Chrome before 1.0.154.64 allows attackers to leverage renderer access to cause a denial of service application crash or possibly execute arbitrary code via vectors related to a large bitmap that arrives over the IPC channel...
CVE-2009-1442: Undefined Security Weakness
Multiple integer overflows in Skia, as used in Google Chrome 1.x before 1.0.154.64 and 2.x, and possibly Android, might allow remote attackers to execute arbitrary code in the renderer process via a crafted 1 image or 2 canvas...
Google Chrome < 1.0.154.64 Multiple Overflows
The version of Google Chrome installed on the remote host is earlier than 1.0.154.64. Such versions are reportedly affected by multiple vulnerabilities : - A failure to properly validate input from a renderer tab process could allow an attacker to crash the browser and possibly run arbitrary code...
MDVA-2008:179 : graphviz
The graphviz package shipped in Mandriva Linux 2008.1 has a bug in its builtin ps renderer: included images are displayed as blank area. An upstream patch fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...
Mandriva Update for graphviz MDVA-2008:179 (graphviz)
Check for the Version of graphviz OpenVAS Vulnerability Test Mandriva Update for graphviz MDVA-2008:179 graphviz Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Mandriva Update for graphviz MDVA-2008:179 (graphviz)
Check for the Version of graphviz OpenVAS Vulnerability Test Mandriva Update for graphviz MDVA-2008:179 graphviz Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
XSS in the Widget Connector
I've been working with the widget connector today and reading through the code when I noticed that the media uris are not being handled securely. try this: widget:url=youtube.com/v="alert'xss' In general there is not a unified way to prevent issues like this in the widget extensions and it is up ...
XSS in the Widget Connector
I've been working with the widget connector today and reading through the code when I noticed that the media uris are not being handled securely. try this: widget:url=youtube.com/v="alert'xss' In general there is not a unified way to prevent issues like this in the widget extensions and it is up ...
XSS in the Widget Connector
I've been working with the widget connector today and reading through the code when I noticed that the media uris are not being handled securely. try this: widget:url=youtube.com/v="alert'xss' In general there is not a unified way to prevent issues like this in the widget extensions and it is up ...
CVE-2008-5749
CVE-2008-5749 affects Google Chrome 1.0.154.36 on Windows XP SP3 and is an argument-injection vulnerability in the chromehtml URI via the --renderer-path option, enabling remote command execution. OpenVAS entries corroborate a Google Chrome argument-injection vulnerability; the core issue is the ...
CVE-2008-5749: Improper Control of Generation of Code
Argument injection vulnerability in Google Chrome 1.0.154.36 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI. NOTE: a third party disputes this issue, stating that Chrome "will ask for user permission" and "cannot launch...
PT-2008-6799 · Google · Google Chrome
Name of the Vulnerable Software and Affected Versions: Google Chrome version 1.0.154.36 Description: The issue allows remote attackers to execute arbitrary commands via the --renderer-path option in a "chromehtml: URI" API endpoint. A third party disputes this issue, stating that Chrome will ask...
CVE-2008-2645: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in Brim formerly Booby 1.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the renderer parameter to template.tpl.php in 1 barrel/, 2 barry/, 3 mylook/, 4 oerdec/, 5 penguin/, 6 sidebar/, 7 slashdot/, and 8 text-only/ in...
Debian Security Advisory DSA 1039-1 (blender)
The remote host is missing an update to blender announced via advisory DSA 1039-1. Several vulnerabilities have been discoverd in in blender, a very fast and versatile 3D modeller/renderer. The Common Vulnerability and Exposures Project identifies the following problems: CVE-2005-3302 Joxean Kore...
USN-473-1: libgd2 vulnerabilities
A buffer overflow was discovered in libgd2's font renderer. By tricking an application using libgd2 into rendering a specially crafted string with a JIS encoded font, a remote attacker could read heap memory or crash the application, leading to a denial of service. CVE-2007-0455 Xavier Roche...
X.org / XFree68 multiple integer overflows
Integer overflow in DBE and Renderer extensions...
CVE-2006-5429: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in Barry Nauta BRIM 1.2.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the renderer parameter in template.tpl.php in 1 templates/barrel/, 2 templates/sidebar/, 3 templates/text-only, 4 templates/slashdot/, 5...
Brim <= 1.2.1 (renderer) Multiple Remote File Include Vulnerabilities
No description provided by source. Brim 1.2.0pre3 , 1.2.1 renderer Remote File Include Vulnerability Turkish Hacker's Discovered By : mdx and TheBatHacker ------------------------------------------------------ Cyber-Warrior TIM Ay ve Y.ld.zlar Geceye Yak...r... the moon and the stars suit the nig...