194 matches found
The vulnerability of the Firefox browser, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.
The use of this feature after release in the RefreshDriverTimer::TickDriver function of the SMIL animation controller in Mozilla Firefox allows malicious actors operating remotely to execute arbitrary code or cause service failures errors when dealing with dynamic memory. This is done by using...
SUSE: Security Advisory for MozillaFirefox (SUSE-SU-2014:0824-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2014:0858-1)
MozillaThunderbird was updated to version 24.6.0 to fix six security issues : - Miscellaneous memory safety hazards CVE-2014-1533/CVE-2014-1534 - Use-after-free and out of bounds issues found using Address Sanitizer CVE-2014-1536/CVE-2014-1537/CVE-2014-1538 - Use-after-free with SMIL Animation...
openSUSE Security Update : seamonkey (openSUSE-SU-2014:0855-1)
seamonkey was updated to version 2.26.1 to fix nine security issues. These security issues were fixed : - Miscellaneous memory safety hazards CVE-2014-1533/CVE-2014-1534 - Use-after-free and out of bounds issues found using Address Sanitizer CVE-2014-1536/CVE-2014-1537/CVE-2014-1538 -...
Apple Quicktime < 7.2 - SMIL Remote Integer Overflow PoC
No description provided by source. ---------------------------------------------------------------------- ATTACK VECTORS ---------------------------------------------------------------------- This vulnerability can be triggered by luring a target user into running a malicious SMIL file locally or...
RealOne Player 1.0/2.0/6.0.10/6.0.11 SMIL File Script Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8453/info Real Networks has reported a vulnerability in RealOne Player. Script embedded in SMIL presentations may be executed in the context of a domain that is specified by an attacker. This could allow for theft of...
RealPlayer 10 ".smil" File Local Buffer Overflow Exploit
No description provided by source. / RealPlayer .smil file buffer overflow Coded by nolimit@CiSO & Buzzdee greets to COREiSO & news & flare & class101 & ESI & RVL & everyone else I forget This uses a seh overwrite method, which takes advantage of the SEH being placed in multiple locations over th...
SuSE 11.3 Security Update : MozillaFirefox (SAT Patch Number 9370)
Mozilla Firefox was updated to version 24.6.0 to fix six security issues : - Miscellaneous memory safety hazards. CVE-2014-1533 / CVE-2014-1534 - Use-after-free and out of bounds issues found using Address Sanitizer. CVE-2014-1536 / CVE-2014-1537 / CVE-2014-1538 - Use-after-free with SMIL Animati...
Ubuntu 14.04 LTS : Thunderbird vulnerabilities (USN-2250-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2250-1 advisory. Gary Kwong, Christoph Diehl, Christian Holler, Hannes Verschore, Jan de Mooij, Ryan VanderMeulen, Jeff Walden and Kyle Huey discovered multiple memory...
Mozilla updates 2014/06 (critical)
These updates contain the latest security and maintenance updates for - Mozilla Firefox 24.6esr - Mozilla Thunderbird 24.6 - Mozilla NSPR is also updated to 4.10.6 to fix MFSA 2014-48/CVE-2014-1533/CVE-2014-1534 Miscellaneous memory safety hazards MFSA...
USN-2243-1 firefox vulnerabilities
Gary Kwong, Christoph Diehl, Christian Holler, Hannes Verschore, Jan de Mooij, Ryan VanderMeulen, Jeff Walden, Kyle Huey, Jesse Ruderman, Gregor Wagner, Benoit Jacob and Karl Tomlinson discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted...
Design/Logic Flaw
Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service heap memory...
CVE-2014-1541
Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service heap memory...
CVE-2014-1541
Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service heap memory...
CVE-2014-1541
Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service heap memory...
Mozilla Thunderbird < 24.6 Multiple Vulnerabilities
Binary data 8292.prm...
UBUNTU-CVE-2014-1541
Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service heap memory...
Mozilla: Use-after-free with SMIL Animation Controller (MFSA 2014-52)
Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service heap memory...
Use-after-free with SMIL Animation Controller — Mozilla
Security researcher Nils used the Address Sanitizer to discover a use-after-free problem with the SMIL Animation Controller when interacting with and rendering improperly formed web content. This causes a potentially exploitable crash...