7658 matches found
February 13, 2018—KB4074592 (OS Build 15063.909)
None None...
The vulnerability of the mozilla::SVGGeometryFrame::GetCanvasTM() function in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a attacker to trigger a service failure.
The vulnerability of the mozilla::SVGGeometryFrame::GetCanvasTM function in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird arises due to the execution of operations beyond the buffer boundaries when rendering hidden SVG elements. Exploiting this vulnerability can...
Debian: Security Advisory (DLA-1013-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 26 Update: webkitgtk4-2.18.6-1.fc26
WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. This package contains WebKitGTK+ for GTK+ 3...
Security update for webkit2gtk3 (important)
This update for webkit2gtk3 fixes the following issues: Update to version 2.18.5: + Disable SharedArrayBuffers from Web API. + Reduce the precision of "high" resolution time to 1ms. + bsc1075419 - Security fixes: includes improvements to mitigate the effects of Spectre and Meltdown CVE-2017-5753...
openSUSE Security Update : webkit2gtk3 (openSUSE-2018-118) (Meltdown) (Spectre)
This update for webkit2gtk3 fixes the following issues : Update to version 2.18.5 : + Disable SharedArrayBuffers from Web API. + Reduce the precision of 'high' resolution time to 1ms. + bsc1075419 - Security fixes: includes improvements to mitigate the effects of Spectre and Meltdown CVE-2017-575...
[SECURITY] Fedora 27 Update: webkitgtk4-2.18.6-1.fc27
WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. This package contains WebKitGTK+ for GTK+ 3...
Vulnerability Spotlight: Walt Disney Per-Face Texture Mapping faceInfoSize Code Execution Vulnerability
This vulnerability was discovered by Tyler Bohan of Cisco Talos. Executive Summary Walt Disney PTEX is an open source software application maintained by Walt Disney Animation Studios. It is designed for use in post-production rendering. It allows for the storage of thousands of texture mappings...
Debian DSA-4097-1 : poppler - security update
Multiple vulnerabilities were discovered in the poppler PDF rendering library, which could result in denial of service or the execution of arbitrary code if a malformed PDF file is processed. This update also fixes a regression in the handling of Type 3 fonts. C Tenable Network Security, Inc. The...
ALPINE-CVE-2017-12182
xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code...
Debian: Security Advisory (DSA-4097-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 26 Update: webkitgtk4-2.18.5-1.fc26
WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. This package contains WebKitGTK+ for GTK+ 3...
[SECURITY] Fedora 27 Update: poppler-0.57.0-7.fc27
poppler is a PDF rendering library...
[SECURITY] Fedora 27 Update: mupdf-1.12.0-1.fc27
MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...
[SECURITY] Fedora 26 Update: poppler-0.52.0-11.fc26
poppler is a PDF rendering library...
[SECURITY] Fedora 26 Update: webkitgtk4-2.18.4-1.fc26
WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. This package contains WebKitGTK+ for GTK+ 3...
USN-3517-1: poppler vulnerabilities
It was discovered that poppler incorrectly handled certain files. If a user or automated system were tricked into opening a crafted PDF file, an attacker could execute arbitrary. CVE-2017-1000456 It was discovered that poppler incorrectly handled certain files. If a user or automated system were...
Debian: Security Advisory (DLA-1228-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-1228-1 : poppler security update
Jason Crain discovered a overflow vulnerability in the poppler PDF rendering library. For Debian 7 'Wheezy', this issue has been fixed in poppler version 0.18.4-6+deb7u5. We recommend that you upgrade your poppler packages. NOTE: Tenable Network Security has extracted the preceding description...