CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

KLA61592 DoS vulnerability in Microsoft Office

Heap buffer overflow vulnerability was found in Microsoft Office. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2023-5217 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Teams-for-Desktop CVE list...

GLSA-202309-11 : libsndfile: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202309-11 libsndfile: Multiple Vulnerabilities - A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file. CVE-2021-3246 - An out-of-bounds...

Mozilla Thunderbird < 115.3.1

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 115.3.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-44 advisory. - Specific handling of an attacker-controlled VP8 media stream could lead to a heap buffer overflow in the conten...

FreeBSD : electron{22,24,25} -- Heap buffer overflow in vp8 encoding in libvpx (2bcd6ba4-d8e2-42e5-9033-b50b722821fb)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2bcd6ba4-d8e2-42e5-9033-b50b722821fb advisory. - Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx...

GHSA-QQVQ-6XGJ-JW8G Electron affected by libvpx's heap buffer overflow in vp8 encoding

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Electron affected by libvpx's heap buffer overflow in vp8 encoding

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-5217

CVE-2023-5217 is a heap buffer overflow in VP8 encoding in libvpx (affecting Google Chrome before 117.0.5938.132 and libvpx 1.13.1). A crafted HTML page could remotely trigger heap corruption. Multiple connected sources confirm the vulnerability in libvpx/WebP contexts; Apple’s advisory notes CVE...

CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

SUSE: Security Advisory (SUSE-SU-2023:3829-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 18.04 ESM : libwebp vulnerability (USN-6369-2)

The remote Ubuntu 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6369-2 advisory. USN-6369-1 fixed a vulnerability in libwebp. This update provides the corresponding update for Ubuntu 18.04 LTS. Tenable has extracted the preceding description...

WebM Project WebP Image Library (libwebp) < 1.3.2 Vulnerability

The version of WebM Project WebP Image Library libwebp installed on the remote host is prior to 1.3.2. It is, therefore, affected by a vulnerability: - Heap buffer overflow in libwebp prior to libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a specially crafted...

Slackware Linux 15.0 / current mozilla-firefox Vulnerability (SSA:2023-271-01)

The version of mozilla-firefox installed on the remote host is prior to 115.3.1esr. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-271-01 advisory. - Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a...

Mozilla Firefox ESR < 115.3.1

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.3.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-44 advisory. - Specific handling of an attacker-controlled VP8 media stream could lead to a heap buffer overflow in the conten...

Mozilla Firefox < 118.0.1

The version of Firefox installed on the remote Windows host is prior to 118.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-44 advisory. - Specific handling of an attacker-controlled VP8 media stream could lead to a heap buffer overflow in the content process. We...

Mozilla Firefox ESR < 115.3.1

The version of Firefox ESR installed on the remote Windows host is prior to 115.3.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-44 advisory. - Specific handling of an attacker-controlled VP8 media stream could lead to a heap buffer overflow in the content process...

Security Vulnerability fixed in Firefox 118.0.1, Firefox ESR 115.3.1, Firefox for Android 118.1.0, Firefox Focus for Android 118.1.0, and Thunderbird 115.3.1. — Mozilla

Specific handling of an attacker-controlled VP8 media stream could lead to a heap buffer overflow in the content process. We are aware of this issue being exploited in other products in the wild...