Security Vulnerabilities fixed in Firefox ESR 115.17 — Mozilla

A permission leak could have occurred from a trusted site to an untrusted site via embed or object elements. An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash. Video frames could have been leaked between origins in some...

CVE-2024-10463: Observable Discrepancy

Video frames could have been leaked between origins in some situations. This vulnerability affects Firefox 132, Firefox ESR 128.4, Firefox ESR 115.17, Thunderbird 128.4, and Thunderbird 132...

PT-2024-10471

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 132 Firefox ESR versions prior to 128.4 Firefox ESR versions prior to 115.17 Thunderbird versions prior to 128.4 Thunderbird versions prior to 132 Description The issue is related to the potential leakage of video...

CVE-2023-6879

A heap-based buffer overflow vulnerability was found in AOM. When increasing the resolution of video frames during a multi-threaded encode, a heap overflow may occur in av1looprestorationdealloc within threadcommon.c, leading to a denial of service or unauthorized reading of memory. Mitigation...

CVE-2023-6879 heap buffer overflow in libaom

Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1looprestorationdealloc...

CVE-2023-6879

CVE-2023-6879 is a heap overflow in libaom’s AV1 encoder triggered when increasing the frame resolution during a multi-threaded encode, specifically in av1_loop_restoration_dealloc(). The connected OSV/SUSE entries confirm this issue affects libaom up to at least version 3.7.0 and was fixed in 3....

CVE-2023-6879: Improper Input Validation

Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1looprestorationdealloc...

SUSE CVE-2015-1258

Google Chrome before 43.0.2357.65 relies on libvpx code that was not built with an appropriate --size-limit value, which allows remote attackers to trigger a negative value for a size field, and consequently cause a denial of service or possibly have unspecified other impact, via a crafted frame...

Fedora: Security Advisory for pfstools (FEDORA-2021-df1fa3d3e0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Compro Camera security vulnerability

Compro Technology Camera is a video camera from Compro Technology China. A security vulnerability exists in Compro Camera that stems from mjpegStreamer.cgi that allows access to video screenshots. The following products and versions are affected: Compro IP70 2.087130218, IP570 2.087130520, IP60 a...

Description of the update for Communicator 2007 R2: July 2009

Describes the update for Communicator 2007 R2 that is dated July 2009.SummaryThis article describes the Microsoft Office Communicator 2007 R2 issues that are fixed in the update for Communicator 2007 R2 that is dated June 2009.This article describes the following items about the update:The issues...

FreeBSD Ports: chromium

The remote host is missing an update to the system as announced in the referenced advisory. VID 68ac6266-25c3-11e1-b63a-00262d5ed8ee OpenVAS Vulnerability Test $ Description: Auto generated from VID 68ac6266-25c3-11e1-b63a-00262d5ed8ee Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

CVE-2011-3910

Google Chrome before 16.0.912.63 does not properly handle YUV video frames, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2011-3910

Google Chrome before 16.0.912.63 does not properly handle YUV video frames, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

Out-of-bounds

Google Chrome before 16.0.912.63 does not properly handle YUV video frames, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2011-3910

Google Chrome before 16.0.912.63 does not properly handle YUV video frames, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2011-3910

Google Chrome before 16.0.912.63 does not properly handle YUV video frames, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2011-3910

Removed by vendor...

CVE-2011-3910: Out-of-bounds Read

Google Chrome before 16.0.912.63 does not properly handle YUV video frames, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

PT-2011-4777

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 16.0.912.63 Description The issue is related to the handling of YUV video frames, which can be exploited by remote attackers to cause a denial of service through an out-of-bounds read. Recommendations For versio...