xulrunner security update

CentOS Errata and Security Advisory CESA-2012:0143 Updated xulrunner packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS...

Mozilla Thunderbird 3.1.x < 3.1.19 'png_decompress_chunk' Integer Overflow

The installed version of Thunderbird 3.1.x is earlier than 3.1.19 and is, therefore, potentially affected by an integer overflow vulnerability. An integer overflow error exists in 'libpng', a library used by this application. When decompressing certain PNG image files, this error can allow a...

Firefox 3.6.x < 3.6.27 'png_decompress_chunk' Integer Overflow

The installed version of Firefox 3.6.x is earlier than 3.6.27 and is, therefore, potentially affected by an integer overflow vulnerability. An integer overflow error exists in 'libpng', a library used by this application. When decompressing certain PNG image files, this error can allow a heap-bas...

Firefox 10.x < 10.0.2 'png_decompress_chunk' Integer Overflow

The installed version of Firefox 10.x is earlier than 10.0.2 and is, therefore, potentially affected by an integer overflow vulnerability. An integer overflow error exists in 'libpng', a library used by this application. When decompressing certain PNG image files, this error can allow a heap-base...

SeaMonkey < 2.7.2 'png_decompress_chunk' Integer Overflow

The installed version of SeaMonkey is earlier than 2.7.2. Such versions are potentially affected by an integer overflow vulnerability. An integer overflow error exists in 'libpng', a library used by this application. When decompressing certain PNG image files, this error can allow a heap-based...

CVE-2011-3019

Heap-based buffer overflow in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska video aka MKV file...

CVE-2011-3019

CVE-2011-3019 : A heap-based buffer overflow in Google Chrome prior to 17.0.963.56 allows remote attackers to cause denial of service or potentially other impact via a crafted Matroska (MKV) file. Affected product: Google Chrome. Root cause: heap-based overflow in MKV parsing. Impact: crash or po...

Critical: Red Hat Security Advisory: thunderbird security update

An updated thunderbird package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

Medium: httpd

Issue Overview: It was discovered that the fix for CVE-2011-3368 did not completely address the problem. An attacker could bypass the fix and make a reverse proxy connect to an arbitrary server not directly accessible to the attacker by sending an HTTP version 0.9 request, or by using a...

Moderate: Red Hat Security Advisory: texlive security update

Updated texlive packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CVE-2012-0758

CVE-2012-0758 is tied to a heap-based buffer overflow in Adobe Shockwave Player prior to version 11.6.4.634. The vulnerability could allow arbitrary code execution and is listed as a critical issue (Windows and macOS). Affected versions include Shockwave Player 11.6.3.633 and earlier, with exploi...

CVE-2012-0848

Heap-based buffer overflow in the wssnddecodeframe function in libavcodec/ws-snd1.c in FFmpeg 0.9.1 allows remote attackers to cause a denial of service application crash via a crafted media file, related to an incorrect calculation, aka "wrong samples count."...

ZDI-12-021 : Adobe Reader BMP Resource Signedness Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-021 : Adobe Reader BMP Resource Signedness Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-021 February 8, 2012 - -- CVE ID: CVE-2011-4373 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendors:...

Debian Security Advisory DSA 2394-1 (libxml2)

The remote host is missing an update to libxml2 announced via advisory DSA 2394-1. OpenVAS Vulnerability Test $Id: deb23941.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2394-1 libxml2 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian Security Advisory DSA 2388-1 (t1lib)

The remote host is missing an update to t1lib announced via advisory DSA 2388-1. OpenVAS Vulnerability Test $Id: deb23881.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2388-1 t1lib Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

CVE-2011-3448

CoreMedia in Apple Mac OS X is affected by a heap-based buffer overflow prior to 10.7.3, exploitable via a crafted H.264 movie file and potentially enabling remote code execution or a denial of service. The issue is addressed by OS X 10.7.3 / Security Update 2012-001 (Mac OS X Lion 10.7.3 and rel...

Medium: t1lib

Issue Overview: Two heap-based buffer overflow flaws were found in the way t1lib processed Adobe Font Metrics AFM files. If a specially-crafted font file was opened by an application linked against t1lib, it could cause the application to crash or, potentially, execute arbitrary code with the...

CentOS 6 : glibc (CESA-2012:0058)

Updated glibc packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CVE-2012-0029

Heap-based buffer overflow in the processtxdesc function in the e1000 emulation hw/e1000.c in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service QEMU crash and possibly execute arbitrary code via crafted legacy mode packets...

CVE-2012-0029

Heap-based buffer overflow in the processtxdesc function in the e1000 emulation hw/e1000.c in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service QEMU crash and possibly execute arbitrary code via crafted legacy mode packets...