KLA11430 ACE vulnerability in Google Chrome

Use-after-free vulnerability was found in FileReader component of Google Chrome. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Stable Channel Update for Desktop Exploitation Public exploits exist for this vulnerability. Malware exists for this...

Microsoft Internet Explorer - MSHTML!CMultiReadStreamLifetimeManager::ReleaseThreadStateInternal Read AV

Microsoft Internet Explorer - MSHTML!CMultiReadStreamLifetimeManager::ReleaseThreadStateInternal Read AV function eventhandler1 CollectGarbage; function eventhandler5 try /FileReader/ var var00063 = new FileReader; catcherr //line 68 try /Blob/ var var00064 = new Blob; catcherr //line 69 try...

Fedora 22 : php (2016-65f1ffdc0c)

26 May 2016, PHP 5.6.22 Core: - Fixed bug 72172 zendhexstrtod should not use strlen. bwitz at hotmail dot com - Fixed bug 72114 Integer underflow / arbitrary null write in fread/gzread. Stas - Fixed bug 72135 Integer Overflow in phphtmlentities. Stas GD: - Fixed bug 72227 imagescale out-of-bounds...

The vulnerability of the Firefox browser, which allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the FileReader class in Firefox browsers is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges or cause a service failure memory corruption due to changes made to the file while it is being read by the...

CVE-2016-1963

The FileReader class in Mozilla Firefox before 45.0 allows local users to gain privileges or cause a denial of service memory corruption by changing a file during a FileReader API read operation...

DEBIAN-CVE-2016-1963

The FileReader class in Mozilla Firefox before 45.0 allows local users to gain privileges or cause a denial of service memory corruption by changing a file during a FileReader API read operation...

CVE-2016-1963

The FileReader class in Mozilla Firefox before 45.0 allows local users to gain privileges or cause a denial of service memory corruption by changing a file during a FileReader API read operation...

Memory corruption

The FileReader class in Mozilla Firefox before 45.0 allows local users to gain privileges or cause a denial of service memory corruption by changing a file during a FileReader API read operation...

CVE-2016-1963

CVE-2016-1963: In Mozilla Firefox, the FileReader API can be abused to memory-corrupt the process by changing a file during a FileReader read operation, allowing a local attacker to gain privileges or cause a denial of service. Affected are Firefox versions prior to 45.0; remediation is to upgrad...

CVE-2016-1963

The FileReader class in Mozilla Firefox before 45.0 allows local users to gain privileges or cause a denial of service memory corruption by changing a file during a FileReader API read operation...

CVE-2016-1963

The FileReader class in Mozilla Firefox before 45.0 allows local users to gain privileges or cause a denial of service memory corruption by changing a file during a FileReader API read operation...

CVE-2016-1963: Improper Restriction of Operations within the Bounds of a Memory Buffer

The FileReader class in Mozilla Firefox before 45.0 allows local users to gain privileges or cause a denial of service memory corruption by changing a file during a FileReader API read operation...

FreeBSD : mozilla -- multiple vulnerabilities (2225c5b4-1e5a-44fc-9920-b3201c384a15)

Mozilla Foundation reports : MFSA 2016-16 Miscellaneous memory safety hazards rv:45.0 / rv:38.7 MFSA 2016-17 Local file overwriting and potential privilege escalation through CSP reports MFSA 2016-18 CSP reports fail to strip location information for embedded iframe pages MFSA 2016-19 Linux video...

PT-2016-1454

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 45.0 Description The issue is related to the FileReader class in Mozilla Firefox, which has insufficient access control. This can be exploited by a local attacker to gain privileges or cause a denial of servic...

CVE-2016-1963

The FileReader class in Mozilla Firefox before 45.0 allows local users to gain privileges or cause a denial of service memory corruption by changing a file during a FileReader API read operation...

Memory corruption when modifying a file being read by FileReader — Mozilla

Security researcher Oriol reported memory corruption when local files are modified by either the user or another program at the same time being read using the FileReader API. This flaw requires that input be taken from a local file in order to be triggered and cannot be triggered by web content...

Immunity Canvas: FIREFOX_PDFJS_FILEREADER

Name| firefoxpdfjsfilereader ---|--- CVE| CVE-2015-4495 Exploit Pack| CANVAS Description| firefoxpdfjsfilereader Notes| CVE Name: CVE-2015-4495 VENDOR: Mozilla NOTES: Tested on: Ubuntu 14.04.3 LTS Firefox 39.0 Under the Response tab of ClientD main window, the option "Respond directly with exploi...