Stable Channel Update

The Chrome Stable channel has been updated to 18.0.1025.168 on Windows, Mac, Linux and Chrome Frame. Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix. 1064...

Stable Channel Release and Beta Channel Update

The Chrome team is excited to announce the release of Chrome 18 to the Stable Channel for Windows, Mac, Linux and Chrome Frame. 18.0.1025.142 contains a number of new features including faster and fancier graphics.More detailed updates are available on theChrome Blog and theChromium Blog. Securit...

Chrome Stable Channel Update

The Chrome Stable channel has been updated to 17.0.963.78 on Windows, Mac, Linux and Chrome Frame. This release fixes issues with Flash games and videos, along with the security fix listed below. Security fixes and rewards: Congratulations again to community member Sergey Glazunov for the first...

CVE-2012-0823

VP8 Codec SDK libvpx before 1.0.0 "Duclair" allows remote attackers to cause a denial of service application crash via 1 unspecified "corrupt input" or 2 by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks"...

DEBIAN-CVE-2012-0823

VP8 Codec SDK libvpx before 1.0.0 "Duclair" allows remote attackers to cause a denial of service application crash via 1 unspecified "corrupt input" or 2 by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks"...

CVE-2012-0823

VP8 Codec SDK libvpx before 1.0.0 "Duclair" allows remote attackers to cause a denial of service application crash via 1 unspecified "corrupt input" or 2 by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks"...

CVE-2012-0823

VP8 Codec SDK libvpx before 1.0.0 "Duclair" allows remote attackers to cause a denial of service application crash via 1 unspecified "corrupt input" or 2 by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks"...

Unfixed Frame Redirect vulnerability at www.universinet.it

Security researcher r14nul, has submitted on 18/02/2012 a Frame Redirect vulnerability affecting www.universinet.it, which at the time of submission ranked 335584 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/08/2012. It is currently...

Tiki Wiki CMS Groupware Frame Injection

Exploit Title: Tiki Wiki CMS Groupware Frame Injection Date: 17.02.2012 Author: Sony Software Link: http://info.tiki.org/tiki-index.php Google Dorks: inurl:tiki-featuredlink.php?type= Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...

Chrome Stable Update

The Chrome Stable channel has been updated to 17.0.963.56 on Windows, Mac, Linux and Chrome Frame. This release fixes a number of stability and security issues in Chrome, and also includes a new version of Flash. More info on the Flash update is available from Adobe. Security fixes and rewards:...

Real Networks RealPlayer < 15.0.2.72 Multiple Vulnerabilities

Binary data 6311.prm...

Google Releases Chrome 17.0.963.46

Google has released Chrome 17.0.963.46 for Linux, Mac, Windows, and Google Chrome Frame to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code and cause a denial-of-service condition. US-CERT encourages users and administrators to review the...

PT-2012-2957

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.x through 15.x before 15.02.71 RealPlayer SP versions 1.0 through 1.1.5 Description The issue allows remote attackers to execute arbitrary code via vectors involving the coded frame size value in a RealAudio audio stream...

Mozilla Thunderbird 9.0 Multiple Vulnerabilities

Binary data 801248.prm...

Mozilla Firefox 9.0 Multiple Vulnerabilities

Binary data 801296.prm...

Mozilla Thunderbird < 10.0 Multiple Vulnerabilities

Binary data 6308.prm...

Mozilla SeaMonkey 2.x < 2.7.0 Multiple Vulnerabilities

Binary data 801334.prm...

Mozilla Products Multiple Unspecified Vulnerabilities - Feb12 (MAC OS X 01)

The host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvulnmacosx01feb12.nasl 6445 2017-06-27 12:31:06Z santu $ Mozilla Products Multiple Unspecified Vulnerabilities - Feb12 MAC OS X 01 Authors:...

Mozilla Foundation Security Advisory 2012-05

Mozilla Foundation Security Advisory 2012-05 Title: Frame scripts calling into untrusted objects bypass security checks Impact: Critical Announced: January 31, 2012 Reporter: mozbugra4 Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 10.0 Thunderbird 10.0 SeaMonkey 2.7 Description...

FreeBSD : mozilla -- multiple vulnerabilities (0a9e2b72-4cb7-11e1-9146-14dae9ebcf89)

The Mozilla Project reports : MFSA 2012-01 Miscellaneous memory safety hazards rv:10.0/ rv:1.9.2.26 MFSA 2012-02 Overly permissive IPv6 literal syntax MFSA 2012-03 iframe element exposed across domains via name attribute MFSA 2012-04 Child nodes from nsDOMAttribute still accessible after removal ...