Lucene search
+L

1720 matches found

ALT Linux
ALT Linux
added 2017/05/02 12:00 a.m.230 views

Security fix for the ALT Linux 10 package thunderbird version 52.1.0-alt1

May 2, 2017 Andrey Cherepanov 52.1.0-alt1 - New version 52.0.1 - Security fixes: + CVE-2017-5429: Memory safety bugs fixed in Firefox 53, Firefox ESR + CVE-2017-5430: Memory safety bugs fixed in Firefox 53, Firefox ESR + CVE-2017-5432: Use-after-free in text input selection + CVE-2017-5433:...

7.5CVSS8.2AI score0.1853EPSS
SaveExploits24
Tenable Nessus
Tenable Nessus
added 2017/04/24 12:00 a.m.82 views

Mozilla Firefox ESR < 52.1

The version of Firefox ESR installed on the remote Windows host is prior to 52.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-12 advisory. - Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. CVE-2017-5469 - A...

9.8CVSS7.6AI score0.1853EPSS
SaveExploits26References34
Tenable Nessus
Tenable Nessus
added 2017/04/24 12:00 a.m.49 views

Mozilla Firefox ESR 45.x < 45.9 Multiple Vulnerabilities (macOS)

The version of Mozilla Firefox ESR installed on the remote macOS or Mac OS X host is 45.x prior to 45.9. It is, therefore, affected by the following vulnerabilities : - Multiple buffer overflow conditions exist in the FLEX generated code due to improper validation of certain input. An...

9.8CVSS7.4AI score0.1853EPSS
SaveExploits24References29
RedHat Linux
RedHat Linux
added 2017/04/21 12:49 a.m.11 views

Mozilla: Use-after-free in nsTArray Length() during XSLT processing (MFSA 2017-11, MFSA 2017-12)

A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...

9.8CVSS7.3AI score0.03575EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2017/04/20 8:21 a.m.10 views

Mozilla: Use-after-free in nsTArray Length() during XSLT processing (MFSA 2017-11, MFSA 2017-12)

A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...

9.8CVSS7.3AI score0.03575EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2017/04/20 6:19 a.m.29 views

CVE-2017-5439

A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...

9.8CVSS3AI score0.03575EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2017/04/20 6:19 a.m.30 views

CVE-2017-5440

A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objects being used when they no longer exist. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1,...

9.8CVSS2.4AI score0.02997EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2017/04/20 12:00 a.m.41 views

CVE-2017-5440

A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objects being used when they no longer exist. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1,...

9.8CVSS7.2AI score0.02997EPSS
SaveExploits1References4
OSV
OSV
added 2017/04/20 12:00 a.m.8 views

UBUNTU-CVE-2017-5438

A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...

9.8CVSS7.3AI score0.03575EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2017/04/20 12:00 a.m.40 views

CVE-2017-5439

A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...

9.8CVSS7.2AI score0.03575EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2017/04/20 12:00 a.m.43 views

CVE-2017-5438

A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...

9.8CVSS7.2AI score0.03575EPSS
SaveExploits1References4
OSV
OSV
added 2017/04/20 12:00 a.m.10 views

UBUNTU-CVE-2017-5439

A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...

9.8CVSS7.3AI score0.03575EPSS
SaveExploits1References5
Mozilla
Mozilla
added 2017/04/19 12:00 a.m.541 views

Security vulnerabilities fixed in Firefox ESR 45.9 — Mozilla

A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animation controller while still in use. This results in a potentially exploitable crash. A use-after-free vulnerability occurs during transaction processing in t...

9.8CVSS1.6AI score0.08767EPSS
SaveExploits4References28Affected Software1
NVD
NVD
added 2017/04/12 2:59 p.m.33 views

CVE-2017-3031

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the XSLT engine...

4.3CVSS3.7AI score0.03159EPSS
SaveExploits0References4
Prion
Prion
added 2017/04/12 2:59 p.m.29 views

Memory corruption

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the XSLT engine...

4.3CVSS4AI score0.03159EPSS
SaveExploits0References4Affected Software4
CVE
CVE
added 2017/04/12 2:00 p.m.96 views

CVE-2017-3031

CVE-2017-3031 affects Adobe Acrobat Reader (various channels) with a memory address leak in the XSLT engine for affected builds (e.g., 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier). The linked open vulnerability set (APSB17-11) groups multiple issues; the provided docum...

4.3CVSS6AI score0.03159EPSS
SaveExploits0References4Affected Software4
Cvelist
Cvelist
added 2017/04/12 2:00 p.m.48 views

CVE-2017-3031

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the XSLT engine...

6.2AI score0.03159EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2017/04/11 11:18 p.m.37 views

CVE-2017-7465

It was found that the JAXP implementation used in EAP 7.0 for XSLT processing is vulnerable to code injection. An attacker could use this flaw to cause remote code execution if they are able to provide XSLT content for parsing. Mitigation Doing a transform in JAXP requires the use of a...

9.8CVSS4.7AI score0.02938EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/04/11 12:00 a.m.40 views

Adobe Reader DC Nested Variables Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with XS...

4.3CVSS1.7AI score0.03159EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/04/11 12:00 a.m.44 views

Adobe Reader DC XSLT Namespace Node Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

4.3CVSS1.6AI score0.03159EPSS
SaveExploits0References1
Rows per page
Query Builder