2724 matches found
Mozilla Firefox Security Advisories (MFSA2017-01, MFSA2017-02) - Windows
Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...
Mozilla: Excessive JIT code allocation allows bypass of ASLR and DEP (MFSA 2017-02)
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Thunderbird 45.7, Firefox ESR 45.7, and Firefox 51...
CVE-2017-5375
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Thunderbird 45.7, Firefox ESR 45.7, and Firefox 51...
Mozilla Firefox < 51.0 Multiple Vulnerabilities
The version of Mozilla Firefox installed on the remote Windows host is prior to 51.0. It is, therefore, affected by multiple vulnerabilities : - Mozilla developers and community members Christian Holler, Gary Kwong, Andre Bargull, Jan de Mooij, Tom Schuster, and Oriol reported memory safety bugs...
Security vulnerabilities fixed in Firefox 51 — Mozilla
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. Use-after-free while manipulating XSL in XSLT documents A memory corruption vulnerability in Skia that can occur when using transforms to make gradients, resulting in a potential...
Based on the Chakra JIT-CFG to bypass the technology-vulnerability warning-the black bar safety net
In this article, we will to introduce the reader in to attack Internet Explorer and the Edge browser can be used to bypass Microsoft's control flow protection of the CFG of the method. Our previous proof-of-concept nature of the exploit code is covered by the object's function pointers to achieve...
java-1.8.0-openjdk security update
1:1.8.0.111-0.b15 - added nss restricting requires - Resolves: rhbz1381990 1:1.8.0.111-0.b15 - Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL. - Resolves: rhbz1381990 1:1.8.0.111-0.b15 - Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591. - Resolves: rhbz138199...
Safari Webkit JIT Exploit for iOS 7.1.2
This module exploits a JIT optimization bug in Safari Webkit. This allows us to write shellcode to an RWX memory section in JavaScriptCore and execute it. The shellcode contains a kernel exploit CVE-2016-4669 that obtains kernel rw, obtains root and disables code signing. Finally we download and...
openSUSE Security Update : pcre2 (openSUSE-2016-966)
This update for pcre2 fixes the following issues : - pcre2 10.22 : - The POSIX wrapper function regcomp did not used to support back references and subroutine calls if called with the REGNOSUB option. It now does. - A new function, pcre2codecopy, is added, to make a copy of a compiled pattern. -...
iOS 9.3.4 Patches Critical Code Execution Flaw
Apple last week patched a critical iOS memory corruption vulnerability that could allow attackers to execute code on compromised devices. The flaw was found by Team Pangu, a Chinese hacker group that specializes in building iOS jailbreak tools. The vulnerability is fixed in iOS 9.3.4. “An...
[SECURITY] Fedora 23 Update: pypy3-2.4.0-3.fc23
PyPy's implementation of Python 3, featuring a Just-In-Time compiler on som e CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc This build of PyPy has JIT-compilation enabled...
[SECURITY] Fedora 22 Update: pypy3-2.4.0-3.fc22
PyPy's implementation of Python 3, featuring a Just-In-Time compiler on som e CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc This build of PyPy has JIT-compilation enabled...
The vulnerability of the SeaMonkey software allows a malicious attacker to execute arbitrary code or cause a service failure.
The vulnerability of the asm.js component of the SeaMonkey software lies in the improper definition of safe exception handling during JIT-compilation and the lack of access to dynamic memory. Exploiting this vulnerability allows a malicious actor to gain access to data in separate memory segments...
[SECURITY] Fedora 23 Update: pypy-4.0.1-3.fc23
PyPy's implementation of Python, featuring a Just-In-Time compiler on some CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc This build of PyPy has JIT-compilation enabled...
[SECURITY] Fedora 24 Update: pypy-5.0.1-3.fc24
PyPy's implementation of Python, featuring a Just-In-Time compiler on some CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc This build of PyPy has JIT-compilation enabled...
[SECURITY] Fedora 24 Update: pypy3-2.4.0-6.fc24
PyPy's implementation of Python 3, featuring a Just-In-Time compiler on som e CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc This build of PyPy has JIT-compilation enabled...
The vulnerability of the Firefox browser, which allows a malicious individual to execute arbitrary code or trigger a service denial
Mozilla Firefox browsers contain a vulnerability related to errors in the implementation of the MPostWriteBarrier class. Exploiting this vulnerability allows malicious actors to cause service interruptions memory corruption and unexpected application termination or execute arbitrary code by...
PT-2020-15714 · Luajit +2 · Luajit +2
Name of the Vulnerable Software and Affected Versions: LuaJIT versions prior to 2.1.0-beta3 Description: The issue is related to an out-of-bounds read in the lj err run function located in lj err.c. Recommendations: For LuaJIT versions prior to 2.1.0-beta3, at the moment, there is no information...
FreeBSD : flash -- multiple vulnerabilities (07888b49-35c4-11e6-8e82-002590263bf5)
Adobe reports : These updates harden a mitigation against JIT spraying attacks that could be used to bypass memory layout randomization mitigations CVE-2016-1006. These updates resolve type confusion vulnerabilities that could lead to code execution CVE-2016-1015, CVE-2016-1019. These updates...