548 matches found
Security update for chromium (important)
This update for chromium to version 66.0.3359.181 fixes the following issues: The following security issues were fixed boo1095163: CVE-2018-6123: Use after free in Blink. CVE-2018-6124: Type confusion in Blink. CVE-2018-6125: Overly permissive policy in WebUSB. CVE-2018-6126: Heap buffer overflow...
chromium-browser: use-after-free in blink
Use after free in WebAudio in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2017-5129
A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
UBUNTU-CVE-2017-5129
A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
CVE-2016-5215
A use after free in webaudio in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
Google Chrome < 55.0.2883.75 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 55.0.2883.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 201612stable-channel-update-for-desktop advisory. - Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75...
Sounds fun
I played with the web audio API for the first time recently, so I thought I'd write up what I learned. I think that's my job or something. Playing a sound The simplest demonstrable thing we can do with web audio is "play a sound". But to do that, we first we need to load & decode something: // Th...
The vulnerability of Google Chrome browser allows a malicious actor to compromise the accessibility of protected information.
The vulnerability exists in the module/webaudio/BiquadDSPKernel.cpp of the Web Audio API implementation in Blink for Google Chrome. It stems from improper handling of parallel streams when attempting to update the coefficients of the biquad filter. Exploiting this vulnerability allows malicious...
The vulnerability of the SeaMonkey software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.
Overfilling the buffer in the Speex decoder of the Web Audio subsystem in Mozilla Firefox allows malicious actors to execute arbitrary code, using specially crafted AudioBuffer channel counters and decoding frequencies...
The vulnerability of the SeaMonkey software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability in the mozilla::dom::OscillatorNodeEngine::ComputeCustom subsystem of Web Audio in Mozilla Firefox and SeaMonkey allows malicious actors to execute arbitrary code or cause service failures such as out-of-bounds reading, memory errors, and unexpected application termination by...
The vulnerability of the Firefox browser, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.
Overfilling the buffer in the Speex decoder of the Web Audio subsystem in Mozilla Firefox allows malicious actors to execute arbitrary code using specially crafted AudioBuffer channel counters and decoding frequencies...
The vulnerability of the Firefox browser, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability in the mozilla::dom::OscillatorNodeEngine::ComputeCustom subsystem of Web Audio in Mozilla Firefox allows malicious actors operating remotely to execute arbitrary code or cause service failures such as out-of-bounds reading, memory corruption, and unexpected application...
The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality of protected information.
A vulnerability exists in the mozilla::dom::AudioEventTimeline function within the implementation of the Web Audio API in Mozilla Firefox ESR, due to the improper creation of the audio data timeline. Exploiting this vulnerability allows malicious actors, operating remotely, to access confidential...
The vulnerability of Thunderbird software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.
A vulnerability exists in the mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox and Thunderbird, due to improper handling of Web Audio’s buffer memory allocation. Exploitation of this vulnerability allows malicious actors to execute arbitrary code or cause...
The vulnerability of Thunderbird software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.
The use of the MediaInputPort class after its release allows malicious actors operating remotely to execute arbitrary code or cause service failures errors in handling dynamic memory by using incorrect control messages from Web Audio...
The vulnerability of Thunderbird software allows a malicious attacker to compromise the confidentiality of protected information.
A vulnerability exists in the mozilla::dom::AudioEventTimeline function within the implementation of the Web Audio API in Mozilla Firefox, Firefox ESR, and Thunderbird. This vulnerability arises due to the improper creation of the audio data timeline. Exploiting this vulnerability allows maliciou...
The vulnerability of the Firefox browser, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.
The use of the MediaInputPort class after its release in Mozilla Firefox allows malicious actors operating remotely to execute arbitrary code or cause service failures errors when dealing with dynamic memory. This is achieved by using an incorrect order of Web Audio control messages...
The vulnerability of the Firefox browser, which allows a malicious attacker to compromise the confidentiality of protected information
A vulnerability exists in the mozilla::dom::AudioEventTimeline function within the implementation of the Web Audio API in Mozilla Firefox, due to the improper creation of the audio data timeline. Exploiting this vulnerability allows malicious actors, operating remotely, to access confidential...
Updated firefox packages fix security vulnerabilities
Updated nss and firefox packages fix security vulnerabilities: Security researcher SkyLined reported a use-after-free issue in how audio is handled through the Web Audio API during MediaStream playback through interactions with the Web Audio API. This results in a potentially exploitable crash...
Updated iceape/sqlite3 packages fix security vulnerabilities
Updated iceape packages fix security issues. The sqlite3 package has been updated as well since the new iceape version requires the SQLITEENABLEDBSTATVTAB feature to be enabled in sqlite. This sqlite3 update also enables ICU support, fixing bug 16814 . Use-after-free vulnerability in the...