OPENSUSE-SU-2018:3687-1 Security update for MozillaThunderbird

This update for Mozilla Thunderbird to version 60.2.1 fixes multiple issues. Multiple security issues were fixed in the Mozilla platform as advised in MFSA 2018-25 and MFSA 2018-28. In general, these flaws cannot be exploited through email in Thunderbird because scripting is disabled when reading...

A week in security (September 24 – 30)

Last week on Labs was a busy one. We discussed how SMS phishing attacks target the job market, issued a warning for TV Licensing phishes, commented on how Apple confused Safari users with recent changes to how OSX handles browser extensions, and elaborated on holes found in Mojave’s privacy...

The Problems and Promise of WebAssembly

Posted by Natalie Silvanovich, Project Zero WebAssembly is a format that allows code written in assembly-like instructions to be run from JavaScript. It has recently been implemented in all four major browsers. We reviewed each browser’s WebAssembly implementation and found three vulnerabilities...

Metasploit Multiple Browsers Obfuscation Technique

Remote attackers can use metasploit modules in order to check for potential browser vulnerabilities on a target client. This information can later be used for attacks...

The Great DOM Fuzz-off of 2017

Posted by Ivan Fratric, Project Zero Introduction Historically, DOM engines have been one of the largest sources of web browser bugs. And while in the recent years the popularity of those kinds of bugs in targeted attacks has somewhat fallen in favor of Flash which allows for cross-browser exploi...

Microsoft Edge and Internet Security Bypass

The vulnerabilities of Microsoft Edge and Internet Explorer are caused by an operation that goes beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow a malicious actor to bypass existing access restrictions by using a specially crafted website...

Microsoft Edge and Internet Privilege Escalation

The vulnerabilities of Microsoft Edge and Internet Explorer are related to errors in access control of namespace resources. Exploiting these vulnerabilities can allow a malicious actor to enhance their privileges using undefined vectors...

EFF Again Calls for Investigation Around W3C's DRM Extension

Digital rights advocates are again pleading with the World Wide Web Consortium W3C to reconsider standardizing DRM in Encrypted Media Extensions, a draft specification that would ultimately feed into HTML 5. Advocacy groups like the Electronic Frontier Foundation EFF and security researchers alik...

Thunderbird Data Compromise

Multiple vulnerabilities exist in the browser engine of Mozilla Firefox, Firefox ESR, and Thunderbird. These vulnerabilities allow malicious actors to trigger service failures memory errors and unexpected application termination or execute arbitrary code...

Thunderbird Data Compromise

Multiple vulnerabilities in the browser engine of Mozilla Firefox and SeaMonkey allow malicious actors operating remotely to cause service failures memory errors and unexpected application exits, or execute arbitrary code...

Firefox Data Compromise

Multiple vulnerabilities in the Mozilla Firefox browser’s engine allow malicious actors to induce service failures memory errors and unexpected application termination or execute arbitrary code...

Internet Explorer Data Compromise

Vulnerabilities that allow for the execution of arbitrary code remotely exist in Internet Explorer due to improper access to objects in memory. These vulnerabilities can cause errors when working with memory and allow attackers to execute arbitrary code in the context of the current user...

Learn Spanish. Speak Spanish - Dangerous filesystem permissions, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Learn Spanish. Speak Spanish published at the 'play' market has multiple vulnerabilities...

Google Chrome DoS

The multiple vulnerabilities of the Google Chrome browser are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service failures or other adverse effects...

Through the mouse scroll wheel to move the data to obtain the Tor browser anonymous user fingerprint-vulnerability warning-the black bar safety net

Through the Internet The Secret ability to communicate for different political molecules and radicals is very important. Then again, almost everyone will care about on the network, privacy issues. Although the Tor network itself provides the user with a high privacy level, so most people are almo...

CVE-2016-1953

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to js/src/jit/arm/Assembler-arm.cpp, and unknown other vecto...

Google Chrome DoS

The multiple vulnerabilities of the Google Chrome browser are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions or potentially have other adverse effects...

Microsoft Edge Internet Explorer Elevated Privilege Execution

The vulnerabilities of Microsoft Edge and Internet Explorer are related to content processing errors on websites. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary web scripts with elevated privileges through a specially crafted website...

[SECURITY] [DSA 3456-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3456-1 [email protected] https://www.debian.org/security/ Michael Gilbert January 27, 2016 https://www.debian.org/security/faq -...

Firefox Code Execution

The multiple vulnerabilities in the Firefox browser’s kernel are caused by buffer overflows. Exploiting these vulnerabilities can allow a malicious actor to cause a service failure memory corruption or execute arbitrary code...