11199 matches found
CVE-2017-7806
A use-after-free vulnerability can occur when the layer manager is freed too early when rendering specific SVG content, resulting in a potentially exploitable crash. This vulnerability affects Firefox 55...
EulerOS 2.0 SP2 : librsvg2 (EulerOS-SA-2017-1137)
According to the version of the librsvg2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The rsvgcssnormalizefontsize function in librsvg 2.40.2 allows context-dependent attackers to cause a denial of service stack consumption and...
Security fix for the ALT Linux 10 package firefox-esr version 52.3.0-alt1
Aug. 8, 2017 Andrey Cherepanov 52.3.0-alt1 - New ESR version 52.3.0 - Security fixes: + CVE-2017-7798: XUL injection in the style editor in devtools + CVE-2017-7800: Use-after-free in WebSockets during disconnection + CVE-2017-7801: Use-after-free with marquee during window resizing +...
EulerOS 2.0 SP1 : librsvg2 (EulerOS-SA-2017-1136)
According to the version of the librsvg2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The rsvgcssnormalizefontsize function in librsvg 2.40.2 allows context-dependent attackers to cause a denial of service stack consumption and...
Denial Of Service (DoS) Through Memory Leak
ImageMagick is vulnerable to denial of service DoS attacks. A malicious user can pass a SVG file to the application to cause a memory leak, causing the application to run out of memory and crash...
DEBIAN-CVE-2017-12566
In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMVGImage in coders/mvg.c, which allows attackers to cause a denial of service, related to the function ReadSVGImage in svg.c...
Debian Security Advisory DSA 3926-1 (chromium-browser - security update)
Several vulnerabilities have been discovered in the chromium web browser. CVE-2017-5087 Ned Williamson discovered a way to escape the sandbox. CVE-2017-5088 Xiling Gong discovered an out-of-bounds read issue in the v8 javascript library. CVE-2017-5089 Michal Bentkowski discovered a spoofing issue...
Google Chrome < 60.0.3112.78 Multiple Vulnerabilities
Binary data 700171.pasl...
chromium-browser: user information leak via svg
A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cross-origin page being iframe'd via a crafted HTML page...
Cross-site Scripting (XSS)
Bolt CMS is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary javascript by uploading a SVG file with Content-Type: image/svg+xml in it's header to the application when editing a page...
[SECURITY] Fedora 25 Update: mingw-librsvg2-2.40.18-1.fc25
An SVG library based on cairo for MinGW...
[SECURITY] Fedora 24 Update: mingw-librsvg2-2.40.18-1.fc24
An SVG library based on cairo for MinGW...
Security update for chromium (important)
This update Chromium to version 60.0.3112.78 fixes security issue and bugs. The following security issues were fixed: CVE-2017-5091: Use after free in IndexedDB CVE-2017-5092: Use after free in PPAPI CVE-2017-5093: UI spoofing in Blink CVE-2017-5094: Type confusion in extensions CVE-2017-5095:...
Security update for chromium (important)
This update Chromium to version 60.0.3112.78 fixes security issue and bugs. The following security issues were fixed: CVE-2017-5091: Use after free in IndexedDB CVE-2017-5092: Use after free in PPAPI CVE-2017-5093: UI spoofing in Blink CVE-2017-5094: Type confusion in extensions CVE-2017-5095:...
[SECURITY] Fedora 26 Update: mingw-librsvg2-2.40.18-1.fc26
An SVG library based on cairo for MinGW...
CVE-2017-5107
A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cross-origin page being iframe'd via a crafted HTML page...
[SECURITY] Fedora 25 Update: librsvg2-2.40.18-1.fc25
An SVG library based on cairo...
Stable Channel Update for Desktop
The Chrome team is delighted to announce the promotion of Chrome 60 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 60.0.3112.78 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...