USN-2770-1 oxide-qt vulnerabilities

It was discovered that ContainerNode::parserInsertBefore in Blink would incorrectly proceed with a DOM tree insertion in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass same origin restrictions. CVE-2015-67...

USN-2770-1: Oxide vulnerabilities

It was discovered that ContainerNode::parserInsertBefore in Blink would incorrectly proceed with a DOM tree insertion in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass same origin restrictions. CVE-2015-67...

CVE-2015-7802

gifread.c in gif2png, as used in OptiPNG before 0.7.6, allows remote attackers to cause a denial of service uninitialized memory read via a crafted GIF file...

Moderate: Red Hat Security Advisory: qemu-kvm security update

Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fr...

Mozilla Thunderbird < 38.1 Multiple Vulnerabilities (Logjam)

Binary data 8879.prm...

Adobe Flash AVSegmentedSource setSubscribedTags Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Apple iOS Memory Uninitialization Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. An uninitialized issue in the Apple iOS kernel allows malicious applications to exploit a vulnerability to obtain sensitive kernel memory information...

libcacard, qemu security update

CentOS Errata and Security Advisory CESA-2015:1793 Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, whic...

Scientific Linux Security Update : qemu-kvm on SL7.x x86_64 (20150915)

An information leak flaw was found in the way QEMU's RTL8139 emulation implementation processed network packets under RTL8139 controller's C+ mode of operation. An unprivileged guest user could use this flaw to read up to 65 KB of uninitialized QEMU heap memory. CVE-2015-5165 After installing thi...

Debian DSA-3360-1 : icu - security update

It was discovered that the International Components for Unicode ICU library mishandles converter names starting with x-, which allows remote attackers to cause a denial of service read of uninitialized memory or possibly have unspecified other impact via a crafted file. %NASLMINLEVEL 70300 C...

[SECURITY] [DSA 3360-1] icu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3360-1 [email protected] https://www.debian.org/security/ Laszlo Boszormenyi GCS September 15, 2015 https://www.debian.org/security/faq -...

Qemu: rtl8139 uninitialized heap memory information leakage to guest (XSA-140)

An information leak flaw was found in the way QEMU's RTL8139 emulation implementation processed network packets under RTL8139 controller's C+ mode of operation. An unprivileged guest user could use this flaw to read up to 65 KB of uninitialized QEMU heap memory...

DSA-3360-1 icu - security update

Bulletin has no description...

FreeType uninitilized memory access

Uninitialized memory access on fonts parsing...

Updated freetype2 packages fix security vulnerabilities

Updated freetype2 packages fix security vulnerabilities: It was discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or hang, resulting in a denial of servic...

MGASA-2015-0367 Updated freetype2 packages fix security vulnerabilities

Updated freetype2 packages fix security vulnerabilities: It was discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or hang, resulting in a denial of servic...

Ubuntu 14.04 LTS : FreeType vulnerabilities (USN-2739-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2739-1 advisory. It was discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote...

Ubuntu: Security Advisory (USN-2739-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2739-1 freetype vulnerabilities

It was discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or hang, resulting in a denial of service, or possibly expose uninitialized memory...

FFmpeg ff_rv34_decode_init_thread_copy denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'ffrv34decodeinitthreadcopy' function in the libavcodec/rv34.c file in versions of FFmpeg prior to 2.7.2, which is caused by the program failing to...