PT-2013-5683

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 26.0 SeaMonkey versions prior to 2.23 Description The issue allows remote attackers to bypass intended sandbox restrictions via a crafted web site, due to improper consideration of the sandbox attribute of an...

PT-2013-5519

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager versions 2.0 through 2.0.1.1 IBM Rational Quality Manager versions 3.x before 3.0.1.6 iFix 1 IBM Rational Quality Manager versions 4.x before 4.0.5 Description A cross-site scripting XSS issue exists in the search...

CVE-2013-6639

CVE-2013-6639 affects Google V8 (before 3.22.24.7) as used in Google Chrome before 31.0.1650.63. The DehoistArrayIndex function in hydrogen-dehoist.cc (hydrogen.cc) can trigger an out-of-bounds write via crafted array indices, potentially leading to a denial of service. The public records indicat...

CVE-2013-6639

Removed by vendor...

Tape library and drives are shown as separate devices

Challenge Tape library and drives are shown as separate devices in console or loading tape into TapeDrive0 moves the tape into TapeDrive1 etc. Shown here, the Tape Library has no Tape Drive listed Shown here, the Tape Drive is separate from the Tape Library. Cause The tape library is not reportin...

Buffer overflow

Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a long string in the name attribute of the cols element in a .wstyle file...

CVE-2013-6937: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a long string in the name attribute of the cols element in a .wstyle file...

PT-2013-6195

Name of the Vulnerable Software and Affected Versions VideoCharge Software Watermark Master version 2.2.23 Description A buffer overflow issue allows remote attackers to execute arbitrary code via a long string in the name attribute of the cols element in a .wstyle file. Recommendations For versi...

SuSE Update for Mozilla Suite openSUSE-SU-2013:1633-1 (Mozilla Suite)

Check for the Version of Mozilla Suite OpenVAS Vulnerability Test $Id: gbsuse201316331.nasl 8045 2017-12-08 08:39:37Z santu $ SuSE Update for Mozilla Suite openSUSE-SU-2013:1633-1 Mozilla Suite Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH,...

CVE-2013-6621

Use-after-free vulnerability in Google Chrome before 31.0.1650.48 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the x-webkit-speech attribute in a text INPUT element...

CVE-2013-6622

Use-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html/HTMLMediaElement.cpp in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the...

CVE-2013-6622

Removed by vendor...

PT-2013-6051

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 31.0.1650.48 Description The issue is related to a use-after-free vulnerability. It can be triggered via vectors related to the x-webkit-speech attribute in a text INPUT element, potentially allowing remote...

Integer overflow

Integer overflow in the OZDocument::parseElement function in Apple Motion 5.0.7 allows remote attackers to cause a denial of service application crash via a 1 large or 2 small value in the subview attribute of a viewer element in a .motn file...

Firefox < 25.0 Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox is earlier than 25.0 and is, therefore, potentially affected by multiple vulnerabilities : - The implementation of Network Security Services NSS does not ensure that data structures are initialized, which could result in a denial of service or disclosure of...

Mozilla: Miscellaneous use-after-free issues found through ASAN fuzzing (MFSA 2013-100)

Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell aka presentation shell implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before...

CVE-2013-5593

The SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly restrict the nature or placement of HTML within a dropdown menu, which allows remote attackers to spoof the address bar or conduct...

Code injection

PDF.js in Mozilla Firefox before 25.0 and Firefox ESR 24.x before 24.1 does not properly handle the appending of an IFRAME element, which allows remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges by using this element within an embedded PDF object...

Design/Logic Flaw

Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell aka presentation shell implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before...

CVE-2013-5599

Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell aka presentation shell implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before...