847 matches found
Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)
The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors...
UBUNTU-CVE-2015-2734
The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors...
The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Cairo package up to version 1.4.12 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
openSUSE Security Update : seamonkey (openSUSE-2015-250)
SeaMonkey was updated to 2.33 bnc917597 - MFSA 2015-11/CVE-2015-0835/CVE-2015-0836 Miscellaneous memory safety hazards - MFSA 2015-12/CVE-2015-0833 bmo945192 Invoking Mozilla updater will load locally stored DLL files Windows only - MFSA 2015-13/CVE-2015-0832 bmo1065909 Appended period to hostnam...
Mozilla Firefox < 36.0 Multiple Vulnerabilities
Binary data 8653.prm...
FreeBSD : mozilla -- multiple vulnerabilities (99029172-8253-407d-9d8b-2cfeab9abf81)
The Mozilla Project reports : MFSA-2015-11 Miscellaneous memory safety hazards rv:36.0 / rv:31.5 MFSA-2015-12 Invoking Mozilla updater will load locally stored DLL files MFSA-2015-13 Appended period to hostnames can bypass HPKP and HSTS protections MFSA-2015-14 Malicious WebGL content crash when...
[SECURITY] Fedora 21 Update: librsvg2-2.40.7-1.fc21
An SVG library based on cairo...
[SECURITY] Fedora 20 Update: librsvg2-2.40.7-1.fc20
An SVG library based on cairo...
USN-2505-1 firefox vulnerabilities
Matthew Noorenberghe discovered that Mozilla domains in the allowlist could make UITour API calls from background tabs. If one of these domains were compromised and open in a background tab, an attacker could potentially exploit this to conduct clickjacking attacks. CVE-2015-0819 Jan de Mooij...
Out-of-bounds
The mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 36.0 allows remote attackers to cause a denial of service out-of-bounds write of zero values, and application crash via vectors that trigger use of DrawTarget and the Cairo library for image drawing...
CVE-2015-0824
CVE-2015-0824 affects Mozilla Firefox before 36.0. The mozilla::layers::BufferTextureClient::AllocateForSurface function can trigger an out-of-bounds write via DrawTarget and the Cairo library for image drawing, causing remote denial of service (crash). The Ubuntu/NVD entries confirm this vulnera...
CVE-2015-0824
The mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 36.0 allows remote attackers to cause a denial of service out-of-bounds write of zero values, and application crash via vectors that trigger use of DrawTarget and the Cairo library for image drawing...
UBUNTU-CVE-2015-0824
The mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 36.0 allows remote attackers to cause a denial of service out-of-bounds write of zero values, and application crash via vectors that trigger use of DrawTarget and the Cairo library for image drawing...
CVE-2015-0824
The mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 36.0 allows remote attackers to cause a denial of service out-of-bounds write of zero values, and application crash via vectors that trigger use of DrawTarget and the Cairo library for image drawing...
Crash using DrawTarget in Cairo graphics library — Mozilla
Security researcher Atte Kettunen used the Address Sanitizer tool to discover a crash while drawing images through the Cairo graphics library while using the DrawTarget function. This can result in a segmentation fault due to zero-ing out of memory outside the bounds of the image...
PT-2017-17759 · Cairo +3 · Cairo +3
Name of the Vulnerable Software and Affected Versions: Cairo version 1.15.4 Description: The issue is related to a NULL pointer dereference in the FT Load Glyph and FT Render Glyph functions, resulting in an application crash. Recommendations: For Cairo version 1.15.4, consider updating to a newe...
PT-2016-2277 · Cairo +2 · Cairo +2
Name of the Vulnerable Software and Affected Versions: cairo versions prior to 1.14.2 Description: The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and application crash, via a negative span length. This is due to a buffer overflow in the fill...
PT-2017-9942 · Cairo +3 · Cairo +3
Name of the Vulnerable Software and Affected Versions: cairo version 1.14.6 Description: The issue is related to an integer overflow in the write png function, which can be triggered by remote attackers using a large svg file. This can cause a denial of service due to an invalid pointer...