Debian Security Advisory DSA 3667-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2016-5170 A use-after-free issue was discovered in Blink/Webkit. CVE-2016-5171 Another use-after-free issue was discovered in Blink/Webkit. CVE-2016-5172 Choongwoo Han discovered an information leak in the v8 javascript...

CVE-2016-7395

The CVE-2016-7395 issue affects SkPath.cpp in Skia as used by Google Chrome prior to 53.0.2785.89 (Windows and macOS) and prior to 53.0.2785.92 (Linux). The vulnerability arises because return values of ChopMonoAtY are not properly validated, enabling a remote attacker to trigger a denial of serv...

CVE-2016-7395

SkPath.cpp in Skia, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, does not properly validate the return values of ChopMonoAtY calls, which allows remote attackers to cause a denial of service uninitialized memory access and application crash or...

CVE-2016-7395

Removed by vendor...

libtiff: use of uninitialized memory in putcontig8bitYCbCr21tile and NeXTDecode

The 1 putcontig8bitYCbCr21tile function in tifgetimage.c or 2 NeXTDecode function in tifnext.c in LibTIFF allows remote attackers to cause a denial of service uninitialized memory access via a crafted TIFF image, as demonstrated by libtiff-cvs-1.tif and libtiff-cvs-2.tif...

libtiff: use of uninitialized memory in NeXTDecode

The NeXTDecode function in tifnext.c in LibTIFF allows remote attackers to cause a denial of service uninitialized memory access via a crafted TIFF image, as demonstrated by libtiff5.tif...

libtiff: use of uninitialized memory in putcontig8bitYCbCr21tile and NeXTDecode

The 1 putcontig8bitYCbCr21tile function in tifgetimage.c or 2 NeXTDecode function in tifnext.c in LibTIFF allows remote attackers to cause a denial of service uninitialized memory access via a crafted TIFF image, as demonstrated by libtiff-cvs-1.tif and libtiff-cvs-2.tif...

libtiff: use of uninitialized memory in NeXTDecode

The NeXTDecode function in tifnext.c in LibTIFF allows remote attackers to cause a denial of service uninitialized memory access via a crafted TIFF image, as demonstrated by libtiff5.tif...

UBUNTU-CVE-2016-4587

WebKit in Apple iOS before 9.3.3 and tvOS before 9.2.2 allows remote attackers to obtain sensitive information from uninitialized process memory via a crafted web site...

Code injection

The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service uninitialized memory access via a crafted GIF file...

CVE-2015-8808

The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service uninitialized memory access via a crafted GIF file...

CVE-2015-8808

The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service uninitialized memory access via a crafted GIF file...

UBUNTU-CVE-2015-8808

The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service uninitialized memory access via a crafted GIF file...

CVE-2015-8808

CVE-2015-8808 affects GraphicsMagick (GIF decoding path). The DecodeImage function in coders/gif.c can trigger an out-of-bounds read on crafted GIFs, leading to denial of service via uninitialized memory access. The issue is tied to the GIF parser in GraphicsMagick 1.3.18 and has been addressed i...

CVE-2015-8808

The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service uninitialized memory access via a crafted GIF file...

Internet Bug Bounty: Adobe Flash Player TimedEvent.parent Memory Corruption Vulnerability

I. Summary Adobe Flash Player is prone to a vulnerability which leads to memory corruption because of uninitialize memory of TimedEvent.parent. ------------------------------------------------------------------ II. Description Normally, TimedEvent class should initialize the memory of its parent...

The vulnerability of Google Chrome browser allows a malicious actor to compromise the accessibility of protected information.

The vulnerability exists in the WebGL implementation of Google Chrome due to improper interaction between calls to clear and the state of the draw buffer. Exploiting this vulnerability allows malicious actors to trigger a service failure reading uninitialized memory by using a specially crafted...

The vulnerability of Google Chrome browser allows a malicious actor to compromise the accessibility of protected information.

The vulnerability exists in the module/webaudio/BiquadDSPKernel.cpp of the Web Audio API implementation in Blink for Google Chrome. It stems from improper handling of parallel streams when attempting to update the coefficients of the biquad filter. Exploiting this vulnerability allows malicious...

The vulnerability of the PHP interpreter allows a remote attacker to trigger a service failure or cause other effects on the system.

The vulnerability of the PHP interpreter in the file module fileinfo for the Fileinfo component lies in the incomplete reading of available data during a pread call. Exploiting this vulnerability allows an attacker to cause service failures by accessing uninitialized memory, or to otherwise affec...

Ubuntu 14.04 LTS / 16.04 LTS : Oxide vulnerabilities (USN-3015-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3015-1 advisory. Multiple security issues were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially...