Google Chrome < 17.0.963.56 Multiple Vulnerabilities (Feb 2012) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

Unspecified vulnerability in the Native Client validator implementation in Google Chrome before 17.0.963.56 has unknown impact and remote attack vectors...

CVE-2011-3020

Unspecified vulnerability in the Native Client validator implementation in Google Chrome before 17.0.963.56 has unknown impact and remote attack vectors...

UBUNTU-CVE-2011-3020

Unspecified vulnerability in the Native Client validator implementation in Google Chrome before 17.0.963.56 has unknown impact and remote attack vectors...

CVE-2011-3020

Unspecified vulnerability in the Native Client validator implementation in Google Chrome before 17.0.963.56 has unknown impact and remote attack vectors...

CVE-2011-3020

Removed by vendor...

CVE-2011-3020: Undefined Security Weakness

Unspecified vulnerability in the Native Client validator implementation in Google Chrome before 17.0.963.56 has unknown impact and remote attack vectors...

PT-2012-1587

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 17.0.963.56 Description The issue is related to an unspecified vulnerability in the Native Client validator implementation. It has unknown impact and remote attack vectors. Recommendations For versions prior to...

FreeBSD : chromium -- multiple vulnerabilities (2f5ff968-5829-11e1-8288-00262d5ed8ee)

Google Chrome Releases reports : 105803 High CVE-2011-3015: Integer overflows in PDF codecs. Credit to Google Chrome Security Team scarybeasts. 106336 Medium CVE-2011-3016: Read-after-free with counter nodes. Credit to miaubiz. 108695 High CVE-2011-3017: Possible use-after-free in database...

Chrome Stable Update

The Chrome Stable channel has been updated to 17.0.963.56 on Windows, Mac, Linux and Chrome Frame. This release fixes a number of stability and security issues in Chrome, and also includes a new version of Flash. More info on the Flash update is available from Adobe. Security fixes and rewards:...

Unfixed XSS vulnerability at www.positifimmobilier.fr

Security researcher Atmon3r, has submitted on 30/01/2012 a cross-site-scripting XSS vulnerability affecting www.positifimmobilier.fr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...

CVE-2011-4869

validator/valnsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service daemon crash via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528...

Design/Logic Flaw

validator/valnsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service daemon crash via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528...

CVE-2011-4869

validator/valnsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service daemon crash via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528...

CVE-2011-4869: Undefined Security Weakness

validator/valnsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service daemon crash via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528...

PT-2011-5151

Name of the Vulnerable Software and Affected Versions Unbound versions prior to 1.4.13p2 Description The issue is related to improper proof processing for NSEC3-signed zones in the validator/val nsec3.c component. This can be exploited by remote DNS servers sending a malformed response that lacks...

DEBIAN-CVE-2011-2201

The Data::FormValidator module 4.66 and earlier for Perl, when untaintallconstraints is enabled, does not properly preserve the taint attribute of data, which might allow remote attackers to bypass the taint protection mechanism via form input...

Design/Logic Flaw

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows remote attackers to affect availability via unknown vectors related to JAXP and unspecified APIs. NOTE: the previous information was obtained from the Februar...

CVE-2010-4470

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows remote attackers to affect availability via unknown vectors related to JAXP and unspecified APIs. NOTE: the previous information was obtained from the Februar...

Firefox nsTextFrame::ClearTextRun()函数远程内存破坏漏洞

BUGTRAQ ID: 34743 CVECAN ID: CVE-2009-1313 Firefox是一款流行的开放源码WEB浏览器。 Firefox的nsTextFrame::ClearTextRun函数中存在内存破坏漏洞，如果用户受骗打开了包含有恶意内容的网页就会导致浏览器崩溃。安装了HTML Validator附件组件的用户尤其受这个漏洞的影响。 Mozilla Firefox 3.0.9 Mozilla ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mozilla.org/ RedHat ------...