Mozilla Firefox Security Advisories (MFSA2016-49, MFSA2016-61) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Google Chrome V8 Denial of Service Vulnerability (CNVD-2015-08180)

Google Chrome is the United States Google Google company developed a Web browser. Google V8 is one of the open source JavaScript engine. A security vulnerability exists in the 'BasicJsonStringifier::: SerializeJSArray' function in the json-stringifier.h file in the JSON stringifier of Google V8...

Google Chrome AppCache Memory Misreference Vulnerability (CNVD-2015-07956)

Google Chrome is a web browser developed by the American company Google Google. A memory misreference vulnerability exists in the AppCache implementation of Google Chrome prior to version 47.0.2526.73. A remote attacker can exploit this vulnerability to cause a denial of service with renderer...

UBUNTU-CVE-2015-8479

Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audiooutputdevice.cc in Google Chrome before 47.0.2526.73 allows attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact by triggering access to an...

UBUNTU-CVE-2015-6785

The CSPSource::hostMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy CSP implementation in Google Chrome before 47.0.2526.73 accepts an x.y hostname as a match for a .x.y pattern, which might allow remote attackers to bypass intended access restrictions...

UBUNTU-CVE-2015-8478

Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used in Google Chrome before 47.0.2526.73, allow attackers to cause a denial of service or possibly have other impact via unknown vectors...

UBUNTU-CVE-2015-6786

The CSPSourceList::matches function in WebKit/Source/core/frame/csp/CSPSourceList.cpp in the Content Security Policy CSP implementation in Google Chrome before 47.0.2526.73 accepts a blob:, data:, or filesystem: URL as a match for a pattern, which allows remote attackers to bypass intended scheme...