Include XSS security warning on HTML macro description in Wiki Markup Renderer

Include XSS security warning on HTML macro description in Wiki Markup Renderer. Derived from JRA-19802...

DSA-1936-1 libgd2 - several vulnerabilities

Bulletin has no description...

CVE-2009-2556: Improper Restriction of Operations within the Bounds of a Memory Buffer

Google Chrome before 2.0.172.37 allows attackers to leverage renderer access to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unspecified vectors that trigger excessive memory allocation...

Mozilla, Google Plug Critical Browser Holes

Just 48 hours after the release of exploit code targeting a zero-day vulnerability in Firefox 3.5, Mozilla’s security response team has rushed out a patch to protect users from code execution attacks. With Firefox 3.5.1, rated a “critical” update, the open-source group corrects a browser crash th...

Google Chrome < 2.0.172.37 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 2.0.172.37. Such versions are reportedly affected by multiple issues : - A heap overflow exists when evaluating specially crafted regular expressions in JavaScript. This could lead to a denial of service or the execution of...

CVE-2009-1442

Multiple integer overflows in Skia, as used in Google Chrome 1.x before 1.0.154.64 and 2.x, and possibly Android, might allow remote attackers to execute arbitrary code in the renderer process via a crafted 1 image or 2 canvas...

CVE-2009-1442: Undefined Security Weakness

Multiple integer overflows in Skia, as used in Google Chrome 1.x before 1.0.154.64 and 2.x, and possibly Android, might allow remote attackers to execute arbitrary code in the renderer process via a crafted 1 image or 2 canvas...

CVE-2009-1441: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the ParamTraits ::Read function in Google Chrome before 1.0.154.64 allows attackers to leverage renderer access to cause a denial of service application crash or possibly execute arbitrary code via vectors related to a large bitmap that arrives over the IPC channel...

Google Chrome < 1.0.154.64 Multiple Overflows

The version of Google Chrome installed on the remote host is earlier than 1.0.154.64. Such versions are reportedly affected by multiple vulnerabilities : - A failure to properly validate input from a renderer tab process could allow an attacker to crash the browser and possibly run arbitrary code...

MDVA-2008:179 : graphviz

The graphviz package shipped in Mandriva Linux 2008.1 has a bug in its builtin ps renderer: included images are displayed as blank area. An upstream patch fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...

Mandriva Update for graphviz MDVA-2008:179 (graphviz)

Check for the Version of graphviz OpenVAS Vulnerability Test Mandriva Update for graphviz MDVA-2008:179 graphviz Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for graphviz MDVA-2008:179 (graphviz)

Check for the Version of graphviz OpenVAS Vulnerability Test Mandriva Update for graphviz MDVA-2008:179 graphviz Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

XSS in the Widget Connector

I've been working with the widget connector today and reading through the code when I noticed that the media uris are not being handled securely. try this: widget:url=youtube.com/v="alert'xss' In general there is not a unified way to prevent issues like this in the widget extensions and it is up ...

XSS in the Widget Connector

I've been working with the widget connector today and reading through the code when I noticed that the media uris are not being handled securely. try this: widget:url=youtube.com/v="alert'xss' In general there is not a unified way to prevent issues like this in the widget extensions and it is up ...

XSS in the Widget Connector

I've been working with the widget connector today and reading through the code when I noticed that the media uris are not being handled securely. try this: widget:url=youtube.com/v="alert'xss' In general there is not a unified way to prevent issues like this in the widget extensions and it is up ...

CVE-2008-5749

CVE-2008-5749 affects Google Chrome 1.0.154.36 on Windows XP SP3 and is an argument-injection vulnerability in the chromehtml URI via the --renderer-path option, enabling remote command execution. OpenVAS entries corroborate a Google Chrome argument-injection vulnerability; the core issue is the ...

CVE-2008-5749: Improper Control of Generation of Code

Argument injection vulnerability in Google Chrome 1.0.154.36 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI. NOTE: a third party disputes this issue, stating that Chrome "will ask for user permission" and "cannot launch...

PT-2008-6799 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome version 1.0.154.36 Description: The issue allows remote attackers to execute arbitrary commands via the --renderer-path option in a "chromehtml: URI" API endpoint. A third party disputes this issue, stating that Chrome will ask...

CVE-2008-2645: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Brim formerly Booby 1.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the renderer parameter to template.tpl.php in 1 barrel/, 2 barry/, 3 mylook/, 4 oerdec/, 5 penguin/, 6 sidebar/, 7 slashdot/, and 8 text-only/ in...

Debian Security Advisory DSA 1039-1 (blender)

The remote host is missing an update to blender announced via advisory DSA 1039-1. Several vulnerabilities have been discoverd in in blender, a very fast and versatile 3D modeller/renderer. The Common Vulnerability and Exposures Project identifies the following problems: CVE-2005-3302 Joxean Kore...