6088 matches found
Mozilla Thunderbird 17.x through 23.x Multiple Vulnerabilities
The installed version of Thunderbird is 17.x or later but prior to 24. It is, therefore, potentially affected the following vulnerabilities: - Memory issues exist in the browser engine that could allow for denial of service or arbitrary code execution. CVE-2013-1718, CVE-2013-1719 - The HTML5 Tre...
SeaMonkey < 2.21 Multiple Vulnerabilities
The installed version of SeaMonkey is earlier than 2.21 and thus, is potentially affected by the following vulnerabilities : - Memory issues exist in the browser engine that could allow for denial of service or arbitrary code execution. CVE-2013-1718, CVE-2013-1719 - The HTML5 Tree Builder does n...
Integer overflow
Integer overflow in the drawLineLoop function in the libGLESv2 library in Almost Native Graphics Layer Engine ANGLE, as used in Mozilla Firefox before 24.0 and SeaMonkey before 2.21, allows remote attackers to execute arbitrary code via a crafted web site...
CVE-2013-1721
CVE-2013-1721 is an integer overflow in the drawLineLoop function of libGLESv2 in ANGLE, used by Firefox/SeaMonkey. Connected OpenSUSE advisories indicate this affects openSUSE Tumbleweed via firefox-esr-128.5.1-1.1, fixed by updating to a newer Firefox ESR package. The advisory confirms the fix ...
CVE-2013-1721
Integer overflow in the drawLineLoop function in the libGLESv2 library in Almost Native Graphics Layer Engine ANGLE, as used in Mozilla Firefox before 24.0 and SeaMonkey before 2.21, allows remote attackers to execute arbitrary code via a crafted web site...
CVE-2013-1721: Improper Restriction of Operations within the Bounds of a Memory Buffer
Integer overflow in the drawLineLoop function in the libGLESv2 library in Almost Native Graphics Layer Engine ANGLE, as used in Mozilla Firefox before 24.0 and SeaMonkey before 2.21, allows remote attackers to execute arbitrary code via a crafted web site...
Ubuntu 12.04 LTS / 12.10 / 13.04 : firefox vulnerabilities (USN-1951-1)
Multiple memory safety issues were discovered in Firefox. If a user were tricked in to opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute arbitrary code with the privileges of the user invoking...
Ubuntu: Security Advisory (USN-1951-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-1951-1: Firefox vulnerabilities
Multiple memory safety issues were discovered in Firefox. If a user were tricked in to opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute arbitrary code with the privileges of the user invoking...
PT-2013-3352
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 24.0 SeaMonkey versions prior to 2.21 Description The issue is related to an integer overflow in the drawLineLoop function within the libGLESv2 library of the Almost Native Graphics Layer Engine ANGLE. This...
CVE-2013-1721
Integer overflow in the drawLineLoop function in the libGLESv2 library in Almost Native Graphics Layer Engine ANGLE, as used in Mozilla Firefox before 24.0 and SeaMonkey before 2.21, allows remote attackers to execute arbitrary code via a crafted web site...
Integer overflow in ANGLE library — Mozilla
Security researcher Alex Chapman reported that the Almost Native Graphics Layer Engine ANGLE library used by Mozilla is vulnerable to an integer overflow. This vulnerability is present because of insufficient bounds checking in the drawLineLoop function, which can be driven by web content to...
Google Chrome Multiple Vulnerabilities-01 (Aug 2013) - Windows
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
FreeBSD : chromium -- multiple vulnerabilities (ae651a4b-0a42-11e3-ba52-00262d5ed8ee)
Google Chrome Releases reports : 25 security fixes in this release, including : - 181617 High CVE-2013-2900: Incomplete path sanitization in file handling. Credit to Krystian Bigaj. - 254159 Low CVE-2013-2905: Information leak via overly broad permissions on shared memory files. Credit to Christi...
CVE-2013-2901
Multiple integer overflows in 1 libGLESv2/renderer/Renderer9.cpp and 2 libGLESv2/renderer/Renderer11.cpp in Almost Native Graphics Layer Engine ANGLE, as used in Google Chrome before 29.0.1547.57, allow remote attackers to cause a denial of service or possibly have unspecified other impact via...
Integer overflow
Multiple integer overflows in 1 libGLESv2/renderer/Renderer9.cpp and 2 libGLESv2/renderer/Renderer11.cpp in Almost Native Graphics Layer Engine ANGLE, as used in Google Chrome before 29.0.1547.57, allow remote attackers to cause a denial of service or possibly have unspecified other impact via...
CVE-2013-2901
Multiple integer overflows in 1 libGLESv2/renderer/Renderer9.cpp and 2 libGLESv2/renderer/Renderer11.cpp in Almost Native Graphics Layer Engine ANGLE, as used in Google Chrome before 29.0.1547.57, allow remote attackers to cause a denial of service or possibly have unspecified other impact via...
CVE-2013-2901
CVE-2013-2901 corresponds to an integer overflow in ANGLE used by Google Chrome (renderer code paths libGLESv2/renderer/Renderer9.cpp and Renderer11.cpp). The issue arises in ANGLE, and, per the description, could enable a remote attacker to cause a denial of service or potentially other impact v...
CVE-2013-2901
Removed by vendor...
CVE-2013-2901: Undefined Security Weakness
Multiple integer overflows in 1 libGLESv2/renderer/Renderer9.cpp and 2 libGLESv2/renderer/Renderer11.cpp in Almost Native Graphics Layer Engine ANGLE, as used in Google Chrome before 29.0.1547.57, allow remote attackers to cause a denial of service or possibly have unspecified other impact via...