CVE-2011-3091

CVE-2011-3091 is a Use-after-free in the IndexedDB implementation of Chromium/Google Chrome. Public sources describe remote denial of service and possible other impact. OpenSUSE’s patch openSUSE-SU-2012:0656-1 fixes this set of Chrome/V8 CVEs (including CVE-2011-3091) by updating Chromium to abou...

CVE-2011-3091

Removed by vendor...

Mozilla Thunderbird < 12.0 Multiple Vulnerabilities

The installed version of Thunderbird is earlier than 12.0 and thus, is potentially affected by the following security issues : - An error exists with handling JavaScript errors that could lead to information disclosure. CVE-2011-1187 - An off-by-one error exists in the 'OpenType Sanitizer' that...

Firefox < 12.0 Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox is earlier than 12.0 and thus, is potentially affected by the following security issues : - An error exists with handling JavaScript errors that can lead to information disclosure. CVE-2011-1187 - An off-by-one error exists in the 'OpenType Sanitizer' which can le...

Thunderbird < 12.0 Multiple Vulnerabilities (Mac OS X)

The installed version of Thunderbird is earlier than 12.0 and thus, is potentially affected by the following security issues : - An error exists with handling JavaScript errors that can lead to information disclosure. CVE-2011-1187 - An off-by-one error exists in the 'OpenType Sanitizer' which ca...

CVE-2012-0469

Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to...

Design/Logic Flaw

Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to...

CVE-2012-0469

Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to...

CVE-2012-0469

CVE-2012-0469 is a use-after-free in Mozilla Firefox/Thunderbird/SeaMonkey components involving the IndexedDB IDBKeyRange cycleCollection Trace path. Affects Firefox 4.x–11.0, ESR 10.x before 10.0.4, Thunderbird 5.0–11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9. Root cause: u...

CVE-2012-0469

Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to...

Mozilla: use-after-free in IDBKeyRange (MFSA 2012-22)

Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to...

Mozilla: use-after-free in IDBKeyRange (MFSA 2012-22)

Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to...

CVE-2011-3955

Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors that trigger the aborting of an IndexedDB transaction...

CVE-2011-3955

Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors that trigger the aborting of an IndexedDB transaction...

Design/Logic Flaw

Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors that trigger the aborting of an IndexedDB transaction...

CVE-2011-3955

Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors that trigger the aborting of an IndexedDB transaction...

CVE-2011-3955

CVE-2011-3955 affects Google Chrome/Chromium up to version 17.0.963.46, where an attacker could trigger an IndexedDB transaction abort, causing the application to crash or potentially other impact. The vulnerability is discussed in multiple advisories (e.g., Gentoo GLSA-201202-01) with explicit r...

CVE-2011-3955

Removed by vendor...