Lucene search
K

5943 matches found

NVD
NVD
added 2008/09/24 8:37 p.m.18 views

CVE-2008-4069

The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to read uninitialized memory, and possibly obtain sensitive information in opportunistic circumstances, via a crafted XBM image file...

5CVSS5.8AI score0.01296EPSS
Exploits1References35
Prion
Prion
added 2008/09/24 8:37 p.m.17 views

Information disclosure

The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to read uninitialized memory, and possibly obtain sensitive information in opportunistic circumstances, via a crafted XBM image file...

5CVSS5.9AI score0.01296EPSS
Exploits1References35Affected Software2
CVE
CVE
added 2008/09/24 6:0 p.m.88 views

CVE-2008-4069

The XBM decoder flaw CVE-2008-4069 affects Mozilla Firefox up to 2.0.0.16/17 and SeaMonkey up to 1.1.x, where processing a crafted XBM image could read uninitialized memory and reveal sensitive data. Remediation per connected advisories: upgrade Firefox to 2.0.0.17 or newer and SeaMonkey to 1.1.1...

5CVSS9AI score0.01296EPSS
Exploits1References35Affected Software2
Cvelist
Cvelist
added 2008/09/24 6:0 p.m.20 views

CVE-2008-4069

The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to read uninitialized memory, and possibly obtain sensitive information in opportunistic circumstances, via a crafted XBM image file...

9AI score0.01296EPSS
Exploits1References35
Ubuntu
Ubuntu
added 2008/09/24 11:39 a.m.67 views

USN-645-2: Firefox vulnerabilities

USN-645-1 fixed vulnerabilities in Firefox and xulrunner for Ubuntu 7.04, 7.10 and 8.04 LTS. This provides the corresponding update for Ubuntu 6.06 LTS. Original advisory details: Justin Schuh, Tom Cross and Peter Williams discovered errors in the Firefox URL parsing routines. If a user were...

10CVSS8.8AI score0.48604EPSS
Exploits15
Ubuntu
Ubuntu
added 2008/09/24 10:20 a.m.67 views

USN-645-1: Firefox and xulrunner vulnerabilities

Justin Schuh, Tom Cross and Peter Williams discovered errors in the Firefox URL parsing routines. If a user were tricked into opening a crafted hyperlink, an attacker could overflow a stack buffer and execute arbitrary code. CVE-2008-0016 It was discovered that the same-origin check in Firefox...

10CVSS8.9AI score0.48604EPSS
Exploits15
RedHat Linux
RedHat Linux
added 2008/09/24 2:4 a.m.1 views

Mozilla XBM decoder information disclosure

The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to read uninitialized memory, and possibly obtain sensitive information in opportunistic circumstances, via a crafted XBM image file...

5CVSS5.9AI score0.01296EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2008/09/24 12:0 a.m.29 views

Mozilla Firefox < 2.0.0.17 Multiple Vulnerabilities

Binary data 4692.prm...

10CVSS7.3AI score0.48604EPSS
Exploits15References25
UbuntuCve
UbuntuCve
added 2008/09/24 12:0 a.m.23 views

CVE-2008-4069

The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to read uninitialized memory, and possibly obtain sensitive information in opportunistic circumstances, via a crafted XBM image file...

5CVSS5.9AI score0.01296EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2008/09/24 12:0 a.m.28 views

SeaMonkey < 1.1.12 Multiple Vulnerabilities

The installed version of SeaMonkey is affected by various security issues : - Using a specially crafted UTF-8 URL in a hyperlink, an attacker might be able to exploit a stack buffer overflow in the Mozilla URL parsing routes to execute arbitrary code. MFSA 2008-37 - It is possible to bypass the...

10CVSS7.5AI score0.48604EPSS
Exploits16References25
Mozilla
Mozilla
added 2008/09/23 12:0 a.m.23 views

XBM image uninitialized memory reading — Mozilla

Security researcher Billy Hoffman discovered a bug in the XBM decoder that allowed random small chunks of uninitialized memory to be read. The severity of this bug was low and did not appear to cause any memory corruption...

5CVSS1.7AI score0.01296EPSS
Exploits1References2Affected Software2
Metasploit
Metasploit
added 2008/09/15 6:50 p.m.11 views

XOR Encoder

Mips Web server exploit friendly xor encoder This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasm' class MetasploitModule 'XOR Encoder', 'Description' = %q Mips Web server exploit friendly xor encoder ,...

7.1AI score
Exploits0
Metasploit
Metasploit
added 2008/09/15 6:50 p.m.16 views

XOR Encoder

Mips Web server exploit friendly xor encoder This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasm' class MetasploitModule 'XOR Encoder', 'Description' = %q Mips Web server exploit friendly xor encoder ,...

7.4AI score
Exploits0
OpenVAS
OpenVAS
added 2008/09/04 12:0 a.m.17 views

FreeBSD Ports: libxine

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.5CVSS6.6AI score0.0354EPSS
Exploits0References3
ALT Linux
ALT Linux
added 2008/08/31 12:0 a.m.27 views

Security fix for the ALT Linux 5 package libtiff version 3.8.2-alt2

Aug. 31, 2008 Dmitry V. Levin 3.8.2-alt2 - Applied patches from Drew Yao of Apple Product Security to fix potential buffer underflow in the LZW decoder CVE-2008-2327...

6.8CVSS6.6AI score0.01508EPSS
Exploits1
ALT Linux
ALT Linux
added 2008/08/31 12:0 a.m.24 views

Security fix for the ALT Linux 10 package libtiff version 3.8.2-alt2

Aug. 31, 2008 Dmitry V. Levin 3.8.2-alt2 - Applied patches from Drew Yao of Apple Product Security to fix potential buffer underflow in the LZW decoder CVE-2008-2327...

6.8CVSS6.6AI score0.01508EPSS
Exploits1
RedHat Linux
RedHat Linux
added 2008/08/28 10:23 p.m.29 views

Important: Red Hat Security Advisory: libtiff security and bug fix update

Updated libtiff packages that fix various security issues and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff packages contain a library of functions for manipulating Tagged...

7.5CVSS7.3AI score0.01508EPSS
Exploits2References4
RedHat Linux
RedHat Linux
added 2008/08/28 10:23 p.m.0 views

libtiff: use of uninitialized memory in LZW decoder

Multiple buffer underflows in the 1 LZWDecode, 2 LZWDecodeCompat, and 3 LZWDecodeVector functions in tiflzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODECLEAR code...

6.8CVSS7.8AI score0.01508EPSS
Exploits1References4
OSV
OSV
added 2008/08/27 8:41 p.m.0 views

DEBIAN-CVE-2008-2327

Multiple buffer underflows in the 1 LZWDecode, 2 LZWDecodeCompat, and 3 LZWDecodeVector functions in tiflzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODECLEAR code...

6.8CVSS8.4AI score0.01508EPSS
Exploits1References1
NVD
NVD
added 2008/08/27 8:41 p.m.18 views

CVE-2008-2327

Multiple buffer underflows in the 1 LZWDecode, 2 LZWDecodeCompat, and 3 LZWDecodeVector functions in tiflzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODECLEAR code...

6.8CVSS6.8AI score0.01508EPSS
Exploits1References47
Rows per page
Query Builder