FreeBSD : chromium -- multiple vulnerabilities (ae651a4b-0a42-11e3-ba52-00262d5ed8ee)

Google Chrome Releases reports : 25 security fixes in this release, including : - 181617 High CVE-2013-2900: Incomplete path sanitization in file handling. Credit to Krystian Bigaj. - 254159 Low CVE-2013-2905: Information leak via overly broad permissions on shared memory files. Credit to Christi...

CVE-2013-2901

Multiple integer overflows in 1 libGLESv2/renderer/Renderer9.cpp and 2 libGLESv2/renderer/Renderer11.cpp in Almost Native Graphics Layer Engine ANGLE, as used in Google Chrome before 29.0.1547.57, allow remote attackers to cause a denial of service or possibly have unspecified other impact via...

Integer overflow

Multiple integer overflows in 1 libGLESv2/renderer/Renderer9.cpp and 2 libGLESv2/renderer/Renderer11.cpp in Almost Native Graphics Layer Engine ANGLE, as used in Google Chrome before 29.0.1547.57, allow remote attackers to cause a denial of service or possibly have unspecified other impact via...

CVE-2013-2901

Multiple integer overflows in 1 libGLESv2/renderer/Renderer9.cpp and 2 libGLESv2/renderer/Renderer11.cpp in Almost Native Graphics Layer Engine ANGLE, as used in Google Chrome before 29.0.1547.57, allow remote attackers to cause a denial of service or possibly have unspecified other impact via...

CVE-2013-2901

Removed by vendor...

CVE-2013-2901

CVE-2013-2901 corresponds to an integer overflow in ANGLE used by Google Chrome (renderer code paths libGLESv2/renderer/Renderer9.cpp and Renderer11.cpp). The issue arises in ANGLE, and, per the description, could enable a remote attacker to cause a denial of service or potentially other impact v...

Google Chrome 29 Fixes 25 Vulnerabilities

There are 25 fresh security patches in the newest version of Google Chrome, including fixes for a number of high-severity vulnerabilities. Chrome 29 also includes a number of performance enhancements. Google regularly pushes out new versions of its browser every few weeks, and sometimes will only...

mozilla -- multiple vulnerabilities

The Mozilla Project reports: MFSA 2013-76 Miscellaneous memory safety hazards rv:24.0 / rv:17.0.9 MFSA 2013-77 Improper state in HTML5 Tree Builder with templates MFSA 2013-78 Integer overflow in ANGLE library MFSA 2013-79 Use-after-free in Animation Manager during stylesheet cloning MFSA 2013-80...

Ubuntu: Security Advisory (USN-1192-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1192-3: Libvoikko regression

USN-1192-1 provided Firefox 6 as a security upgrade. Unfortunately, this caused a regression in libvoikko which caused Firefox to crash while spell checking words with hyphens. This update corrects the issue. We apologize for the inconvenience. Original advisory details: Aral Yaman discovered a...

Mozilla Products Multiple Vulnerabilities - (MAC OS X)

The host is installed with Mozilla firefox/seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvulnmacosx.nasl 7024 2017-08-30 11:51:43Z teissa $ Mozilla Products Multiple Vulnerabilities - MAC OS X Authors: Madhuri D Copyright: Copyright c 2011...

Mozilla Foundation Security Advisory 2011-41

Mozilla Foundation Security Advisory 2011-41 Title: Potentially exploitable WebGL crashes Impact: Critical Announced: September 27, 2011 Reporter: Michael Jordan, Ben Hawkes Products: Firefox, SeaMonkey Fixed in: Firefox 7.0 SeaMonkey 2.4 Description Michael Jordon of Context IS reported that in...

CVE-2011-3002

Almost Native Graphics Layer Engine ANGLE, as used in Mozilla Firefox before 7.0 and SeaMonkey before 2.4, does not validate the return value of a GrowAtomTable function call, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vecto...

seamonkey: Update to Mozilla Seamonkey 2.4 (important)

Mozilla Seamonkey was updated to version 2.4, fixing various bugs and security issues. MFSA 2011-36: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption...

Buffer overflow

Almost Native Graphics Layer Engine ANGLE, as used in Mozilla Firefox before 7.0 and SeaMonkey before 2.4, does not validate the return value of a GrowAtomTable function call, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vecto...

Mozilla Firefox和SeaMonkey远程缓冲区溢出漏洞

BUGTRAQ ID: 49813 CVE ID: CVE-2011-3002 Firefox是一款非常流行的开源WEB浏览器。SeaMonkey是开源的Web浏览器、邮件和新闻组客户端、IRC会话客户端和HTML编辑器。 Firefox和SeaMonkey在实现上安全漏洞，远程攻击者可在受影响应用程序中执行任意代码，或造成拒绝服务。 在WebGL中使用的ANGLE库中，GrowAtomTable返回的值没有验证错误，导致使用特制请求造成缓冲区溢出。 Mozilla Firefox 3.6.x Mozilla SeaMonkey 2.x 厂商补丁： Mozilla -------...

CVE-2011-3002

CVE-2011-3002 concerns Mozilla Firefox (pre-7.0) and SeaMonkey (pre-2.4) where ANGLE does not validate the return value of GrowAtomTable, enabling memory-allocation errors that can cause a crash or potentially allow arbitrary code execution. The vulnerability is triggered by vectors that lead to ...

Potentially exploitable WebGL crashes — Mozilla

Michael Jordon of Context IS reported that in the ANGLE library used by WebGL the return value from GrowAtomTable was not checked for errors. If an attacker could cause requests that exceeded the available memory those would fail and potentially lead to a buffer overrun as subsequent code wrote...

seamonkey: Update to Mozilla Seamonkey 2.3 (important)

Mozilla Seamonkey suite was updated to version 2.3. The update fixes bugs and security issues. Following security issues were fixed: http://www.mozilla.org/security/announce/2011/mfsa2011-33.ht ml Mozilla Foundation Security Advisory 2011-33 MFSA 2011-33 Mozilla Foundation Security Advisory 2011-...

Ubuntu: Security Advisory (USN-1192-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...