Out-of-bounds

The TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on Windows, allows remote attackers to cause a denial of service out-of-bounds write and application crash or possibly have unspecified other impact by triggering use of a WebGL shader th...

CVE-2016-2824

The TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on Windows, allows remote attackers to cause a denial of service out-of-bounds write and application crash or possibly have unspecified other impact by triggering use of a WebGL shader th...

CVE-2016-2824

CVE-2016-2824 involves ANGLE used by Mozilla Firefox on Windows and caused an out-of-bounds write in a WebGL shader, leading to denial of service (crash) or other impact. OpenSUSE/SUSE advisories indicate this was fixed in Firefox ESR updates (e.g., 45.3.0 ESR) and NSS-related patches; Mozilla MF...

CVE-2016-2824

The TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on Windows, allows remote attackers to cause a denial of service out-of-bounds write and application crash or possibly have unspecified other impact by triggering use of a WebGL shader th...

KLA10822 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR

Multiple serious vulnerabilities have been found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, elevate privileges, cause denial of service, conduct XSS or obtain sensitive information. Below is a complete list of...

Out-of-bounds write with WebGL shader — Mozilla

Security researcher Aral reported an out-of-bounds write when using the ANGLE graphics library, which is used for WebGL content on Windows systems. This crash occurs due to improper size checking while writing to an array during some WebGL shader operations...

Ubuntu 14.04 LTS / 16.04 LTS : Oxide vulnerabilities (USN-2955-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2955-1 advisory. A use-after-free was discovered when responding synchronously to permission requests. An attacker could potentially exploit this to cause a...

USN-2955-1: Oxide vulnerabilities

A use-after-free was discovered when responding synchronously to permission requests. An attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking the program. CVE-2016-1578 An out-of-bounds read...

Angle Casino-Holdem&Slot&Bac - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Angle Casino-Holdem&Slot&Bac published at the 'play' market has multiple vulnerabilities...

Debian DSA-3531-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2016-1646 Wen Xu discovered an out-of-bounds read issue in the v8 library. - CVE-2016-1647 A use-after-free issue was discovered. - CVE-2016-1648 A use-after-free issue was discovered in the handling of extensions. -...

Debian Security Advisory DSA 3531-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2016-1646 Wen Xu discovered an out-of-bounds read issue in the v8 library. CVE-2016-1647 A use-after-free issue was discovered. CVE-2016-1648 A use-after-free issue was discovered in the handling of extensions...

DSA-3531-1 chromium-browser - security update

Bulletin has no description...

The vulnerability of the Firefox browser, which allows a violator to trigger a service failure or cause other effects

The vulnerability of the Buffer11::NativeBuffer11::map ANGLE function in the Firefox browser arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to trigger a service failure memory corruption, or possibly cause other adverse effects...

Google ANGLE Denial of Service Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation.Google ANGLE Almost Native Graphics Layer Engine is a graphics layer engine of the U.S. company Google Google. A security vulnerability exists in the 'Buffer11::NativeBuffer11::map' function in Google ANGLE in Mozil...

CVE-2016-1944

The Buffer11::NativeBuffer11::map function in ANGLE, as used in Mozilla Firefox before 44.0, might allow remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

Memory corruption

The Buffer11::NativeBuffer11::map function in ANGLE, as used in Mozilla Firefox before 44.0, might allow remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

CVE-2016-1944

CVE-2016-1944 affects Mozilla Firefox before 44.0 via a flaw in ANGLE’s Buffer11::NativeBuffer11::map, leading to memory corruption and potential denial of service. OpenSUSE/Mozilla advisories around 2016-02 show Firefox 44.0 (NSS 3.21, NSPR 4.11) as part of the fix set, with the issue listed amo...

CVE-2016-1944

The Buffer11::NativeBuffer11::map function in ANGLE, as used in Mozilla Firefox before 44.0, might allow remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

Firefox < 44 Multiple Vulnerabilities

The version of Firefox installed on the remote Windows host is prior to 44. It is, therefore, affected by the following vulnerabilities : - A cookie injection vulnerability exists due to illegal control characters being stored as cookie values in violation of RFC6265. A remote attacker can exploi...

Mozilla Firefox 44 Security Patches

Mozilla has patched a number of critical vulnerabilities in Firefox 44 and Firefox Extended Release 38.6, which were released this week. The most serious flaws were memory vulnerabilities that lived in both the public and extended support versions of the browser. A buffer overflow write in WebGL,...