OPENSUSE-SU-2017:3433-1 Security update for Mozilla Thunderbird

This update for Mozilla Thunderbird to version 52.5.2 fixes the following vulnerabilities: - CVE-2017-7846: JavaScript Execution via RSS in mailbox:// origin bsc1074043 - CVE-2017-7847: Local path string can be leaked from RSS feed bsc1074044 - CVE-2017-7848: RSS Feed vulnerable to new line...

The vulnerability of the Blink display module in Google Chrome browser allows a hacker to execute arbitrary code with elevated privileges or cause a service failure.

The vulnerability of the Blink display module in Google Chrome browsers arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions, obtain confidential information, execute arbitrary code with elevat...

[SECURITY] Fedora 27 Update: wayland-1.14.0-2.fc27

Wayland is a protocol for a compositor to talk to its clients as well as a C library implementation of that protocol. The compositor can be a standalone display server running on Linux kernel modesetting and evdev input devices, an X application, or a wayland client itself. The clients can be...

Apple WebKit Out-of-bounds Read (CVE-2017-13785)

An arbitrary code execution vulnerability has been discovered in Apple WebKit. The vulnerability is due to an error in Apple Webkit while handling certain display properties within the style blocks. A remote attacker could exploit this issue by enticing the target user to open a maliciously craft...

PT-2017-3587 · Qemu +5 · Qemu +5

Name of the Vulnerable Software and Affected Versions: QEMU versions 2.11.0 and older Description: The issue is related to insufficient input validation in the VNC server implementation of the QEMU hardware emulator. It can be exploited by a remote attacker to cause a denial of service. A malicio...

Apple WebKit out-of-bounds read (CVE-2017-13783)

An arbitrary code execution vulnerability has been discovered in Apple WebKit. The vulnerability is due to an error in Apple Webkit while handling certain display properties within the style blocks. A remote attacker could exploit this issue by enticing the target user to open a maliciously craft...

CVE-2017-16405

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the...

Design/Logic Flaw

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the...

CVE-2017-13170

An elevation of privilege vulnerability in the MediaTek display driver. Product: Android. Versions: Android kernel. Android ID A-36102397. References: M-ALPS03359280...

Privilege escalation

An elevation of privilege vulnerability in the MediaTek display driver. Product: Android. Versions: Android kernel. Android ID A-36102397. References: M-ALPS03359280...

CVE-2017-13170

An elevation of privilege vulnerability in the MediaTek display driver. Product: Android. Versions: Android kernel. Android ID A-36102397. References: M-ALPS03359280...

CVE-2017-13170

CVE-2017-13170 is an elevation of privilege in the MediaTek display driver used by Android. The issue affects the Android kernel via the MediaTek display driver component and is described as a local EoP vulnerability with potential to gain privileged execution. The Android 2017-12-01/2017-12-05 s...

Google Android Display Qualcomm Component Elevation of Privilege Vulnerability

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android Display Qualcomm component. An attacker can exploit this vulnerability to achieve elevation of...

Google Android Qualcomm Display Information Disclosure Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, of which Qualcomm Display is one of the components. Qualcomm Display is one of the display components developed by...

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2017-36528)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android Display Qualcomm component. An attacker could exploit this vulnerability to achieve elevation of...

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2017-36525)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android Display Qualcomm component. An attacker can exploit this vulnerability to achieve elevation of...

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2017-36520)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android Display Qualcomm component. An attacker can exploit this vulnerability to achieve elevation of...

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2017-36527)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android Display Qualcomm component. An attacker could exploit this vulnerability to achieve elevation of...

Google Android MediaTek component elevation of privilege vulnerability (CNVD-2017-36931)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and MediaTek Display driver is a MediaTek-developed display driver component used in it. An elevation of privilege vulnerability exists in the Google Android MediaTek component. A...

Google Android MediaTek component elevation of privilege vulnerability (CNVD-2017-36932)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and MediaTek Display driver is a MediaTek-developed display driver component used in it. An elevation of privilege vulnerability exists in the Google Android MediaTek component. A...