Crash scaling <video> to extreme sizes — Mozilla

sczimmer reported a crash when scaling an OGG element to extreme sizes...

Firefox < 9.0 Multiple Vulnerabilities

The installed version of Firefox is earlier than 9.0 and thus, is potentially affected by the following security issues : - An out-of-bounds memory access error exists in the 'SVG' implementation and can be triggered when 'SVG' elements are removed during a 'DOMAttrModified' event handler...

Kool Media Converter 2.6.0 Denial Of Service

!/usr/bin/env python Exploit Title: Kool Media Converter v2.6.0 DOS Date: 10/10/2011 Author: swami E-Mail: flaviodotbaldassiatgmaildotcom Software Link: http://www.bestwebsharing.com/downloads/kool-media-converter-setup.exe Version: 2.6.0 Tested on: Windows XP SP3 ENG --- From Vendor Website Kool...

Kool Media Converter 2.6.0 - Denial of Service

Kool Media Converter 2.6.0 - Denial of Service !/usr/bin/env python Exploit Title: Kool Media Converter v2.6.0 DOS Date: 10/10/2011 Author: swami E-Mail: flaviodotbaldassiatgmaildotcom Software Link: http://www.bestwebsharing.com/downloads/kool-media-converter-setup.exe Version: 2.6.0 Tested on:...

Kool Media Converter 2.6.0 - .ogg File Buffer Overflow

Kool Media Converter 2.6.0 - .ogg File Buffer Overflow source: https://www.securityfocus.com/bid/50651/info Kool Media Converter is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to execute...

Kool Media Converter 2.6.0 - '.ogg' File Buffer Overflow

source: https://www.securityfocus.com/bid/50651/info Kool Media Converter is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed...

Reggae player (.ogg) Local BOF Exploit

Exploit for windows platform in category local exploits !/usr/bin/python print" Listen to me Baby DDOS I swear if I saw this again will I could destroy any of the server applications server, Which I believed was" 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

Ubuntu Update for libvoikko USN-1192-3

Ubuntu Update for Linux kernel vulnerabilities USN-1192-3 OpenVAS Vulnerability Test $Id: gbubuntuUSN11923.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for libvoikko USN-1192-3 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net Th...

Ubuntu: Security Advisory (USN-1192-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 11.04 : libvoikko regression (USN-1192-3)

USN-1192-1 provided Firefox 6 as a security upgrade. Unfortunately, this caused a regression in libvoikko which caused Firefox to crash while spell checking words with hyphens. This update corrects the issue. We apologize for the inconvenience. Aral Yaman discovered a vulnerability in the WebGL...

USN-1192-3: Libvoikko regression

USN-1192-1 provided Firefox 6 as a security upgrade. Unfortunately, this caused a regression in libvoikko which caused Firefox to crash while spell checking words with hyphens. This update corrects the issue. We apologize for the inconvenience. Original advisory details: Aral Yaman discovered a...

USN-1222-2: Mozvoikko, ubufox, webfav update

USN-1222-1 fixed vulnerabilities in Firefox. This update provides updated packages for use with Firefox 7. Original advisory details: Benjamin Smedberg, Bob Clary, Jesse Ruderman, Bob Clary, Andrew McCreight, Andreas Gal, Gary Kwong, Igor Bukanov, Jason Orendorff, Jesse Ruderman, and Marcia Knous...

Mozilla Foundation Security Advisory 2011-44

Mozilla Foundation Security Advisory 2011-44 Title: Use after free reading OGG headers Impact: Critical Announced: September 27, 2011 Reporter: sczimmer Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 7.0 Thunderbird 7.0 SeaMonkey 2.4 Description sczimmer reported that Firefox crashed...

CVE-2011-3005

Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via crafted OGG headers in a .ogg file...

Ubuntu 11.04 : Firefox vulnerabilities (USN-1222-1)

Benjamin Smedberg, Bob Clary, Jesse Ruderman, Bob Clary, Andrew McCreight, Andreas Gal, Gary Kwong, Igor Bukanov, Jason Orendorff, Jesse Ruderman, and Marcia Knous discovered multiple memory vulnerabilities in the browser rendering engine. An attacker could use these to possibly execute arbitrary...

USN-1222-1: Firefox vulnerabilities

Benjamin Smedberg, Bob Clary, Jesse Ruderman, Bob Clary, Andrew McCreight, Andreas Gal, Gary Kwong, Igor Bukanov, Jason Orendorff, Jesse Ruderman, and Marcia Knous discovered multiple memory vulnerabilities in the browser rendering engine. An attacker could use these to possibly execute arbitrary...

CVE-2011-3005

Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via crafted OGG headers in a .ogg file...

CVE-2011-3005

Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via crafted OGG headers in a .ogg file...

Design/Logic Flaw

Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via crafted OGG headers in a .ogg file...

CVE-2011-3005

Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via crafted OGG headers in a .ogg file...