706 matches found
Mozilla Firefox < 36.0 Multiple Vulnerabilities
Binary data 8653.prm...
Heap overflow
Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to obtain sensitive information from uninitialized process memory via a malformed SVG graphic...
CVE-2015-0827
Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to obtain sensitive information from uninitialized process memory via a malformed SVG graphic...
thunderbird: multiple issues
CVE-2015-0822 information leak: Security researcher Armin Razmdjou reported that a user readable file in a known local path could be uploaded to a malicious site. This was done by manipulating the autocomplete feature in a form and user interaction with it. While the local file is not visibly...
UBUNTU-CVE-2015-0827
Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to obtain sensitive information from uninitialized process memory via a malformed SVG graphic...
Firefox ESR 31.x < 31.5 Multiple Vulnerabilities (Mac OS X)
The version of Firefox ESR 31.x installed on the remote Mac OS X host is prior to 31.5. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability exists related to the autocomplete feature that allows an attacker to read arbitrary files. CVE-2015-0822...
Out-of-bounds read and write while rendering SVG content — Mozilla
Security researcher Abhishek Arya Inferno of the Google Chrome Security Team used the Address Sanitizer tool to report an out-of-bounds read and an out-of-bounds write when rendering an improperly formatted SVG graphic. This could potentially allow the attacker to read uninitialized memory...
UBUNTU-CVE-2014-9815
ImageMagick allows remote attackers to cause a denial of service application crash via a crafted wpg file...
UBUNTU-CVE-2014-9837
coders/pnm.c in ImageMagick 6.9.0-1 Beta and earlier allows remote attackers to cause a denial of service crash via a crafted png file...
[SECURITY] Fedora 20 Update: kdegraphics-thumbnailers-4.14.1-1.fc20
Thumbnailers for various graphic types...
[SECURITY] Fedora 20 Update: kdegraphics-strigi-analyzer-4.14.1-1.fc20
Strigi analyzers for various graphic types, including: dvi, tiff...
Inxi - A newer, better system information script for irc, administration, and system troubleshooters
A newer, better system information script for irc, administration, and system troubleshooters. Inxi Options Inxi has a wide range of options and custom triggers, along with useful defaults like -b or -F. Plain inxi, no options, prints a single line of basic system information. Here is a screensho...
Oracle Outside-In FPX File Parsing Heap Overflow
No description provided by source. Application: Oracle Outside-In FPX File Parsing Heap Overflow Version: he vulnerabilities are reported in versions 8.3.5 and 8.3.7. Exploitation: Remote code execution Secunia Number: SA49936 PRL: 2012-26 Author: Francis Provencher Protek Research Lab's Website:...
KingView 6.5.3 SCADA HMI Heap Overflow PoC
No description provided by source. Exploit Title: KingView 6.53 SCADA HMI Heap Overflow PoC Date: 9/28/2010 Author: Dillon Beresford Software Link: http://download.kingview.com/software/kingview%20English%20Version/kingview6.53EN.rar Version: 6.53 English Tested on: Windows XP SP1 works on SP2 an...
Microsoft Excel 95-2004 Malformed Graphic File Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16181/info Microsoft Excel is susceptible to a code-execution vulnerability. The issue presents itself when Excel tries to process malformed or corrupted XLS files. Attackers may exploit this issue to execute arbitrary...
Corel PHOTO-PAINT X3 13.0.0.576 - DLL Hijacking Exploit (crlrib.dll)
No description provided by source. / Corel PHOTO-PAINT X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc: Corel PHOTO-PAINT X3...
openSUSE Security Update : chromium (openSUSE-SU-2012:1682-1)
Update to 25.0.1362 - Security fixes bnc794075 : - CVE-2012-5139: Use-after-free with visibility events - CVE-2012-5140: Use-after-free in URL loader - CVE-2012-5141: Limit Chromoting client plug-in instantiation. - CVE-2012-5142: Crash in history navigation. - CVE-2012-5143: Integer overflow in...
iOS end of the Alipay aeration unlock vulnerability wrong 5 times to unlock it-vulnerability warning-the black bar safety net
1 2 3 0 6 purchase train tickets available Alipay, Beijing 5 0 0 0 taxi available PayPal payment...... With PayPal increasingly wide range of applications, which frequently exposed the security risks are also a concern. Recently, the iOS end phone PayPal is aeration out there to unlock the...
Microsoft Office Excel Graphic Object Dereferencing Code Execution - Ver2 (CVE-2011-0977)
A code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly handle dereferencing data structures when parsing a specially crafted Office file that contains graphic objects. Successful exploitatio...
Artweaver栈缓冲区溢出漏洞(CVE-2013-3481)
BUGTRAQ ID: 60236 CVECAN ID: CVE-2013-3481 Artweaver是一款免费的绘图工具。 Artweaver 3.1.4 及其他版本在处理JPG图形文件时存在边界错误，这可导致栈缓冲区溢出。 0 Artweaver Artweaver = 3.1.5 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.artweaver.de/en...