2997 matches found
CVE-2011-3052
Removed by vendor...
CVE-2011-3052
CVE-2011-3052 involves memory corruption in the WebGL canvas handling of Chromium/Chrome. The issue arises from the WebGL implementation not properly handling CANVAS elements, enabling a remote attacker to cause a denial of service (memory corruption) and potentially other unspecified impacts via...
Six High-Risk Flaws Fixed in Google Chrome
Google has fixed nine new vulnerabilities in its Chrome browser, including six high-risk flaws. The most serious of the bugs include three separate use-after-free vulnerabilities in various parts of the browser. As part of its researcher reward program, Google paid out $5,500 in bounties for...
CVE-2011-3052: Improper Restriction of Operations within the Bounds of a Memory Buffer
The WebGL implementation in Google Chrome before 17.0.963.83 does not properly handle CANVAS elements, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...
Google Chrome < 17.0.963.83 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 17.0.963.83 and is, therefore, affected by the following vulnerabilities : - An unspecified integer issue exists in libpng. CVE-2011-3045 - An error exists related to the extension web request API that could allow denial of...
Google Chrome < 17.0.963.83 Multiple Vulnerabilities
Binary data 6356.pasl...
PT-2012-1613
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 17.0.963.83 Description The issue is related to the WebGL implementation in Google Chrome, which does not properly handle CANVAS elements. This can be exploited by remote attackers to cause a denial of service,...
chromium -- multiple vulnerabilities
Google Chrome Releases reports: 113902 High CVE-2011-3050: Use-after-free with first-letter handling. Credit to miaubiz. 116162 High CVE-2011-3045: libpng integer issue from upstream. Credit to Glenn Randers-Pehrson of the libpng project. 116461 High CVE-2011-3051: Use-after-free in CSS cross-fad...
Stable Channel Update
The Chrome Stable channel has been updated to 17.0.963.83 on Windows, Mac, Linux and Chrome Frame. This release fixes issues with Flash games, along with the security fixes listed below. Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bu...
Mozilla Foundation Security Advisory 2011-51
Mozilla Foundation Security Advisory 2011-51 Title: Cross-origin image theft on Mac with integrated Intel GPU Impact: High Announced: November 8, 2011 Reporter: Claus Wahlers Products: Firefox, Thunderbird Fixed in: Firefox 8.0 Thunderbird 8.0 Description Claus Wahlers reported that random images...
CVE-2011-3653
Mozilla Firefox before 8.0 and Thunderbird before 8.0 on Mac OS X do not properly interact with the GPU memory behavior of a certain driver for Intel integrated GPUs, which allows remote attackers to bypass the Same Origin Policy and read image data via vectors related to WebGL textures...
CVE-2011-3653
Mozilla Firefox before 8.0 and Thunderbird before 8.0 on Mac OS X do not properly interact with the GPU memory behavior of a certain driver for Intel integrated GPUs, which allows remote attackers to bypass the Same Origin Policy and read image data via vectors related to WebGL textures...
Design/Logic Flaw
Mozilla Firefox before 8.0 and Thunderbird before 8.0 on Mac OS X do not properly interact with the GPU memory behavior of a certain driver for Intel integrated GPUs, which allows remote attackers to bypass the Same Origin Policy and read image data via vectors related to WebGL textures...
CVE-2011-3653
Mozilla Firefox before 8.0 and Thunderbird before 8.0 on Mac OS X do not properly interact with the GPU memory behavior of a certain driver for Intel integrated GPUs, which allows remote attackers to bypass the Same Origin Policy and read image data via vectors related to WebGL textures...
CVE-2011-3653
CVE-2011-3653 affects Mozilla Firefox < 8.0 and Thunderbird
CVE-2011-3653: Exposure of Sensitive Information to an Unauthorized Actor
Mozilla Firefox before 8.0 and Thunderbird before 8.0 on Mac OS X do not properly interact with the GPU memory behavior of a certain driver for Intel integrated GPUs, which allows remote attackers to bypass the Same Origin Policy and read image data via vectors related to WebGL textures...
Thunderbird 7.x Multiple Vulnerabilities (Mac OS X)
The installed version of Thunderbird 7.x is potentially affected by the following security issues : - Certain invalid sequences are not handled properly in 'Shift-JIS' encoding, which can allow cross-site scripting attacks. CVE-2011-3648 - Profiling JavaScript files with many functions can cause...
Mozilla Thunderbird < 8.0 Multiple Vulnerabilities
The installed version of Thunderbird is earlier than 8.0 and thus, is potentially affected by the following security issues : - Certain invalid sequences are not handled properly in 'Shift-JIS' encoding and can allow cross-site scripting attacks. CVE-2011-3648 - The addition of the 'Azure' graphi...
Firefox < 8.0 Multiple Vulnerabilities
The installed version of Firefox is earlier than 8.0 and thus, is potentially affected by the following security issues : - Certain invalid sequences are not handled properly in 'Shift-JIS' encoding and can allow cross-site scripting attacks. CVE-2011-3648 - The addition of the 'Azure' graphics...
PT-2011-4564
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 8.0 Thunderbird versions prior to 8.0 Description The issue arises from improper interaction with the GPU memory behavior of a certain driver for Intel integrated GPUs, allowing remote attackers to bypass the...