Design/Logic Flaw

Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 might allow user-assisted remote attackers to execute arbitrary code via vectors involving use of mozRequestFullScree...

Design/Logic Flaw

Use-after-free vulnerability in the nsTextEditRules::WillInsert function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2012-3990

Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors,...

CVE-2012-4182

Use-after-free vulnerability in the nsTextEditRules::WillInsert function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2012-3988

Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 might allow user-assisted remote attackers to execute arbitrary code via vectors involving use of mozRequestFullScree...

CVE-2012-2878

Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to plug-in handling...

Design/Logic Flaw

Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving onclick events...

CVE-2012-2893

Double free vulnerability in libxslt, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XSL transforms...

CVE-2012-2885

Removed by vendor...

CVE-2012-1529

Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that 1 was not properly initialized or 2 is deleted, aka "OnMove Use After Free Vulnerability."...

CVE-2012-2548

CVE-2012-2548 corresponds to a use-after-free vulnerability in Microsoft Internet Explorer 9 (Layout Use After Free). Connected advisories confirm the flaw affects Internet Explorer, involving use-after-free of layout-related objects (e.g., CCaret/CTreeNode pathways) and enabling remote code exec...

CVE-2012-2557

Summary of CVE-2012-2557 (CVE-2012-2557): A use-after-free vulnerability in Microsoft Internet Explorer 6–8 can permit remote code execution when a crafted page triggers access to a freed object, commonly associated with cloneNode handling (outerText/ CMarkup context). The issue is described as a...

CVE-2012-2546

The CVE-2012-2546 entry concerns a memory-use-after-free vulnerability in Microsoft Internet Explorer 9 (IE9) related to the Event Listener use-after-free vulnerability. The underlying issue is a use-after-free in IE9’s event listener handling that can allow remote attackers to execute arbitrary ...

CVE-2012-1529

Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that 1 was not properly initialized or 2 is deleted, aka "OnMove Use After Free Vulnerability."...

CVE-2012-3726

CVE-2012-3726 is a double-free vulnerability in ImageIO’s JPEG handling on iOS prior to iOS 6. The flaw could allow remote code execution or a denial of service via a crafted JPEG image. Public documents underlined in Apple advisories indicate the issue was addressed in the iOS 6 update; no expli...

CVE-2012-2803

CVE-2012-2803 describes a double-free vulnerability in the FFmpeg/Libav code path, specifically in the mpeg_decode_frame function (libavcodec/mpeg12.c). Affected products include FFmpeg prior to 0.11 and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5. The description notes the impact as unknown,...

Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2011:142)

Security issues were identified and fixed in mozilla firefox and thunderbird : Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent the starting of a download in response to the holding of the Enter key, which allows user-assisted remote...

Mandriva Linux Security Advisory : openssl (MDVSA-2012:007)

Multiple vulnerabilities has been found and corrected in openssl : The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack CVE-2011-410...

Debian Security Advisory DSA 2528-1 (icedove)

The remote host is missing an update to icedove announced via advisory DSA 2528-1. OpenVAS Vulnerability Test $Id: deb25281.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2528-1 icedove Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

CVE-2012-3959

Use-after-free vulnerability in the nsRangeUpdater::SelAdjDeleteNode function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial ...