DEBIAN-CVE-2016-9556

The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted image file...

CVE-2016-9556: Improper Restriction of Operations within the Bounds of a Memory Buffer

The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted image file...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2017:0714-1)

This update for MozillaFirefox to ESR 45.8 fixes the following issues: Security issues fixed bsc1028391 : - CVE-2017-5402: Use-after-free working with events in FontFace objects - CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping - CVE-2017-5400: asm.js...

Android HTC Sensor Hub Driver Privilege Vulnerability

Android on Nexus 9, Pixel and Pixel XL is an open source Linux-based operating system for Nexus 9 and other smart devices developed by Google and the Open Handheld Alliance OHA.HTC Sensor Hub Driver is a microcontroller that helps to HTC Sensor Hub Driver is one of the microcontrollers used to he...

Android Qualcomm fingerprint sensor driver boost vulnerability (CNVD-2017-03739)

Android on Pixel and Pixel XL is an open source Linux-based operating system for the Pixel and Pixel XL smart devices developed by Google Inc. and the Open Handheld Alliance OHA.Qualcomm fingerprint sensor The Qualcomm fingerprint sensor driver is one of the fingerprint sensor drivers. The Qualco...

Android Qualcomm input hardware driver privilege vulnerability

Android on Android One, Pixel, and Pixel XL is an open source Linux-based operating system for Android One and other smart devices developed by Google and the Open Handheld Alliance OHA.The Qualcomm input hardware Driver is one of the input driver applications. The Qualcomm input hardware driver ...

Android Qualcomm fingerprint sensor driver boost vulnerability

Android on Pixel and Pixel XL is an open source Linux-based operating system for the Pixel and Pixel XL smart devices developed by Google Inc. and the Open Handheld Alliance OHA.Qualcomm fingerprint sensor The Qualcomm fingerprint sensor driver is one of the fingerprint sensor drivers. The Qualco...

Android kernel security subsystem privilege vulnerability

Android on Pixel and Pixel XL is an open source Linux-based operating system for the Pixel and Pixel XL smartphones developed by Google and the Open Handset Alliance OHA. kernel security is a subsystem of the kernel security configuration. kernel security is a kernel security configuration...

CVE-2017-6335

The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service out-of-bounds read and application crash via a small samples per pixel value in a CMYKA TIFF file...

Mozilla: Pixel and history stealing via floating-point timing side channel with SVG filters (MFSA 2017-06)

Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a targeted user. This can be used to extract history information and read text values across domains. This violates same-origin policy and leads to information...

Android Qualcomm camera driver elevation of privilege vulnerability (CNVD-2017-02812)

Android on Pixel and Pixel XL is a Linux-based open source operating system for the Pixel and Pixel XL smartphones developed by Google and the Open Handheld Alliance OHA.Qualcomm camera Driver is one of the camera drivers used in the... Qualcomm camera driver is one of the camera drivers develope...

Google Android Qualcomm Wi-Fi Driver Information Disclosure Vulnerability (CNVD-2017-03824)

Android on Pixel and Pixel XL is an open source Linux-based operating system for the Pixel and Pixel XL smartphones developed by Google and the Open Handheld Alliance OHA.Qualcomm Wi-Fi Driver is one of the wireless driver components. Qualcomm Wi-Fi Driver is one of the wireless driver components...

Google Pixel Qualcomm Bootloader Information Disclosure Vulnerability (CNVD-2017-03822)

Android on Pixel and Pixel XL is a Linux-based open source operating system for the Pixel and Pixel XL smartphones developed by Google and the Open Handset Alliance OHA in the U.S. The Qualcomm bootloader is a U.S.-developed bootloader used in the Pixel and Pixel XL. Qualcomm bootloader is a...

Mozilla: Pixel and history stealing via floating-point timing side channel with SVG filters (MFSA 2017-06)

Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a targeted user. This can be used to extract history information and read text values across domains. This violates same-origin policy and leads to information...

Mozilla: Pixel and history stealing via floating-point timing side channel with SVG filters (MFSA 2017-06)

Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a targeted user. This can be used to extract history information and read text values across domains. This violates same-origin policy and leads to information...

Mozilla Thunderbird Security Advisories (MFSA2017-05, MFSA2017-07) - Windows

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

CVE-2017-5407

Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a targeted user. This can be used to extract history information and read text values across domains. This violates same-origin policy and leads to information...

Security vulnerabilities fixed in Firefox 52 — Mozilla

JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. A crash triggerable by web content in which an ErrorResult references unassigned memory due to a logic error. The resulting crash may be exploitabl...

CVE-2016-9773: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted image file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9556...

ImageMagick heap buffer overflow vulnerability (CNVD-2017-01881)

ImageMagick is the United States ImageMagickStudio company's set of open source image processing software. The software can read, convert and write pictures in a variety of formats. A heap buffer overflow vulnerability exists in the MagickCore/pixel-accessor.h file in ImageMagick version 7.0.3.8....