Firefox: Ogg Vorbis Decoding Memory Corruption (MFSA 2012-07)

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

RedHat Update for firefox RHSA-2012:0079-01

Check for the Version of firefox OpenVAS Vulnerability Test RedHat Update for firefox RHSA-2012:0079-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2012-0444

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute...

Mozilla Thunderbird 3.1.x < 3.1.18 Multiple Vulnerabilities

The installed version of Thunderbird 3.1.x is earlier than 3.1.18 and is, therefore, potentially affected by the following vulnerabilities: - A use-after-free error exists related to removed nsDOMAttribute child nodes.CVE-2011-3659 - The IPv6 literal syntax in web addresses is not being properly...

Firefox 3.6 < 3.6.26 Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox 3.6 is earlier than 3.6.26. Such versions are potentially affected by multiple vulnerabilities : - A use-after-free error exists related to removed nsDOMAttribute child nodes.CVE-2011-3659 - The IPv6 literal syntax in web addresses is not being properly enforced...

Firefox 3.6.x < 3.6.26 Multiple Vulnerabilities

The installed version of Firefox 3.6.x is earlier than 3.6.26 and is, therefore, potentially affected by the following security issues : - A use-after-free error exists related to removed nsDOMAttribute child nodes.CVE-2011-3659 - The IPv6 literal syntax in web addresses is not being properly...

RHEL 4 / 5 / 6 : firefox (RHSA-2012:0079)

Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Thunderbird 3.1 < 3.1.18 Multiple Vulnerabilities (Mac OS X)

The installed version of Thunderbird 3.1 is earlier than 3.1.18. Such versions are potentially affected by multiple vulnerabilities : - A use-after-free error exists related to removed nsDOMAttribute child nodes.CVE-2011-3659 - The IPv6 literal syntax in web addresses is not being properly...

SeaMonkey < 2.7.0 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 2.7.0. Such versions are potentially affected by the following security issues : - A use-after-free error exists related to removed nsDOMAttribute child nodes.CVE-2011-3659 - Various memory safety issues exist. CVE-2012-0442, CVE-2012-0443 - Memo...

Potential Memory Corruption When Decoding Ogg Vorbis files — Mozilla

Security researcher regenrecht reported via TippingPoint's Zero Day Initiative the possibility of memory corruption during the decoding of Ogg Vorbis files. This can cause a crash during decoding and has the potential for remote code execution...

libtremor -- memory corruption

The Mozilla Project reports: Security researcher regenrecht reported via TippingPoint's Zero Day Initiative the possibility of memory corruption during the decoding of Ogg Vorbis files. This can cause a crash during decoding and has the potential for remote code execution...

Google Chrome < 15.0.874.120 Multiple Vulnerabilities

Binary data 6094.pasl...

Google Chrome < 15.0.874.120 Multiple Vulnerabilities

Binary data 800938.prm...

Google Chrome 15.x MKV和Vorbis媒体处理漏洞

CVE ID：CVE-2011-3893 Google Chrome是一款开源的WEB浏览器。 MKV和Voribis媒体处理器存在越界读漏洞，攻击者构建恶意WEB页，诱使用户解析，可导致应用程序崩溃。 Google Chrome 15.x 厂商解决方案 Google Chrome 15.0.874.120已经修复此漏洞，建议用户下载使用： http://googlechromereleases.blogspot.com/2011/11/stable-channel-update.html...

Google Chrome Multiple Vulnerabilities - November11 (Linux)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnnov11lin.nasl 7044 2017-09-01 11:50:59Z teissa $ Google Chrome Multiple Vulnerabilities - November11 Linux Authors: Rachana Shetty Copyright: Copyright c 2011...

Google Chrome Multiple Vulnerabilities - November11 (Mac OS X)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnnov11macosx.nasl 7044 2017-09-01 11:50:59Z teissa $ Google Chrome Multiple Vulnerabilities - November11 Mac OS X Authors: Rachana Shetty Copyright: Copyright c...

Google Chrome Multiple Vulnerabilities (Nov 2011) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome Multiple Vulnerabilities (Nov 2011) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-3895

Heap-based buffer overflow in the Vorbis decoder in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted stream...