The vulnerability in the cr_tknzr_parse_comment function of the cr-tknzr.c component, a library for working with cascading tables in CSS2 Libcroco, allows a hacker to cause a service failure.

The vulnerability of the crtknzrparsecomment function in the cr-tknzr.c component of the Libcroco library for working with cascading tables in css2 is related to the execution of an operation outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause servic...

libcroco security update

CentOS Errata and Security Advisory CESA-2020:4072 An update for libcroco is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RHEL 8 : libcroco (RHSA-2020:3654)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3654 advisory. The libcroco is a standalone Cascading Style Sheet level 2 CSS2 parsing and manipulation library. Security Fixes: libcroco: Stack overflow in functio...

Moderate: Red Hat Security Advisory: libcroco security update

An update for libcroco is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

libcroco: Multiple vulnerabilities

Background libcroco is a standalone CSS2 parsing and manipulation library. Description Multiple vulnerabilities have been discovered in libcroco. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially crafted CSS file...

HTML Injection

Грядки, на которых раньше буйно цвёл XSS, давно вытоптаны стадами жадных школьников, потому старый и никому ранее не нужный баян под названием "HTML Injection" может заиграть новыми нотами : Цитата: CSS level 2 was developed by the W3C and published as a Recommendation in May 1998. A superset of...