2997 matches found
PT-2018-17315
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 64.0.3282.119 Description A heap buffer overflow issue in WebGL allows a remote attacker to perform an out of bounds memory read via a crafted HTML page. This could potentially enable attackers to view memory...
PT-2018-17311
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 64.0.3282.119 Description The issue is related to insufficient data validation in WebGL, allowing a remote attacker to perform an out of bounds memory read via a crafted HTML page. This could potentially enable...
PT-2018-17322
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 64.0.3282.119 Description The issue is related to insufficient policy enforcement in WebGL, allowing a remote attacker to potentially leak a user's redirect URL via a crafted HTML page. This could be achieved by...
The vulnerability of the BufferSubData() function in Thunderbird email clients and Firefox browsers allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the BufferSubData function in Thunderbird email clients and Firefox browsers exists due to incorrect handling of WebGL content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure using specially crafted WebGL content...
Security vulnerabilities fixed in Thunderbird 52.5.2 — Mozilla
A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being passed within the library during checks and results in a potentially exploitable crash. Note: This attack only affects...
[ASA-201712-6] qt5-webengine: multiple issues
Arch Linux Security Advisory ASA-201712-6 ========================================= Severity: Critical Date : 2017-12-13 CVE-ID : CVE-2017-15386 CVE-2017-15387 CVE-2017-15388 CVE-2017-15390 CVE-2017-15392 CVE-2017-15394 CVE-2017-5124 CVE-2017-5126 CVE-2017-5127 CVE-2017-5128 CVE-2017-5129...
Security vulnerabilities fixed in Firefox ESR 52.5.2 — Mozilla
A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being passed within the library during checks and results in a potentially exploitable crash. Note: This attack only affects...
Google Chrome WebGL 2 ReadPixels Heap Buffer Overflow (CVE-2017-5112)
A heap buffer overflow vulnerability exists in the WebGL component of Google Chrome. This vulnerability is due to a missing bounds check after calculating a user-controlled offset into a heap buffer. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously craft...
chromium-browser WebGL Heap Overflow Vulnerability
chromium-browser is an open source web browser project started by Google to provide source code for the proprietary Google Chrome browser. A heap overflow vulnerability exists in chromium-browser WebGL. An attacker can exploit the vulnerability to execute arbitrary code in the context of the...
Debian DSA-4020-1 : chromium-browser - security update
Several vulnerabilities have been discovered in the chromium web browser. In addition, this message serves as an annoucment that security support for chromium in the oldstable release jessie, Debian 8, is now discontinued. Debian 8 chromium users that desire continued security updates are strongl...
openSUSE Security Update : chromium (openSUSE-2017-1221)
This update to Chromium 62.0.3202.75 fixes the following security issues : - CVE-2017-5124: UXSS with MHTML - CVE-2017-5125: Heap overflow in Skia - CVE-2017-5126: Use after free in PDFium - CVE-2017-5127: Use after free in PDFium - CVE-2017-5128: Heap overflow in WebGL - CVE-2017-5129: Use after...
openSUSE: Security Advisory for chromium (openSUSE-SU-2017:2902-1)
The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security update for chromium (important)
This update to Chromium 62.0.3202.75 fixes the following security issues: - CVE-2017-5124: UXSS with MHTML - CVE-2017-5125: Heap overflow in Skia - CVE-2017-5126: Use after free in PDFium - CVE-2017-5127: Use after free in PDFium - CVE-2017-5128: Heap overflow in WebGL - CVE-2017-5129: Use after...
CVE-2017-5112
Heap buffer overflow in WebGL in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
CVE-2017-5112
Heap buffer overflow in WebGL in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
UBUNTU-CVE-2017-5112
Heap buffer overflow in WebGL in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
CVE-2017-5112
Heap buffer overflow in WebGL in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
CVE-2017-5112
Heap buffer overflow in WebGL in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
CVE-2017-5112
CVE-2017-5112 corresponds to a heap buffer overflow in WebGL (Chrome/Chromium) prior to version 61.0.3163.79, caused by a missing bounds check after calculating a user-controlled offset into a heap buffer. A remote attacker could exploit via a crafted HTML page to execute arbitrary code inside th...
