Lucene search
+L

263 matches found

OSV
OSV
added 2015/10/15 10:59 a.m.3 views

DEBIAN-CVE-2015-6761

The updatedimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service race condition and memory...

6.8CVSS8.5AI score0.01051EPSS
SaveExploits0References1
Prion
Prion
added 2015/10/15 10:59 a.m.24 views

Race condition

The updatedimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service race condition and memory...

6.8CVSS7.5AI score0.01051EPSS
SaveExploits0References13Affected Software2
Cvelist
Cvelist
added 2015/10/15 10:0 a.m.36 views

CVE-2015-6761

The updatedimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service race condition and memory...

9.1AI score0.01051EPSS
SaveExploits0References13
Debian CVE
Debian CVE
added 2015/10/15 10:0 a.m.71 views

CVE-2015-6761

The updatedimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service race condition and memory...

6.8CVSS9.4AI score0.01051EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2015/10/15 12:0 a.m.32 views

CVE-2015-6761

The updatedimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service race condition and memory...

6.8CVSS7.2AI score0.01051EPSS
SaveExploits0References7
OSV
OSV
added 2015/10/15 12:0 a.m.3 views

UBUNTU-CVE-2015-6761

The updatedimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service race condition and memory...

6.8CVSS7.4AI score0.01051EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2015/10/07 12:0 a.m.36 views

SUSE SLED12 / SLES12 Security Update : MozillaFirefox, mozilla-nspr (SUSE-SU-2015:1680-1)

Mozilla Firefox was updated to version 38.3.0 ESR bsc947003, fixing bugs and security issues. - MFSA 2015-96/CVE-2015-4500/CVE-2015-4501 Miscellaneous memory safety hazards rv:41.0 / rv:38.3 - MFSA 2015-101/CVE-2015-4506 Buffer overflow in libvpx while parsing vp9 format video - MFSA...

7.5CVSS8.2AI score0.0608EPSS
SaveExploits0References33
Tenable Nessus
Tenable Nessus
added 2015/10/06 12:0 a.m.47 views

Ubuntu 14.04 LTS : Thunderbird vulnerabilities (USN-2754-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2754-1 advisory. Andrew Osmond, Olli Pettay, Andrew Sutherland, Christian Holler, David Major, Andrew McCreight, and Cameron McCormack discovered multiple memory safety...

7.5CVSS9.2AI score0.0608EPSS
SaveExploits0References15
BDU FSTEC
BDU FSTEC
added 2015/10/06 12:0 a.m.11 views

Vulnerability of Firefox and Firefox ESR browsers, allowing attackers to execute arbitrary code

The vulnerability of the nestegg-trackcodecdata function in Firefox and Firefox ESR browsers is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted WebM video element header...

6.8CVSS8.6AI score0.04774EPSS
SaveExploits0References3Affected Software2
OSV
OSV
added 2015/10/05 2:30 p.m.12 views

USN-2754-1 thunderbird vulnerabilities

Andrew Osmond, Olli Pettay, Andrew Sutherland, Christian Holler, David Major, Andrew McCreight, and Cameron McCormack discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message, an attacker could potentially exploit these to cause a...

7.5CVSS7.9AI score0.0608EPSS
SaveExploits0References15
Ubuntu
Ubuntu
added 2015/10/05 2:30 p.m.74 views

USN-2754-1: Thunderbird vulnerabilities

Andrew Osmond, Olli Pettay, Andrew Sutherland, Christian Holler, David Major, Andrew McCreight, and Cameron McCormack discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message, an attacker could potentially exploit these to cause a...

7.5CVSS9.1AI score0.0608EPSS
SaveExploits0
CNVD
CNVD
added 2015/09/27 12:0 a.m.3 views

Mozilla Firefox and Firefox ESR 'nestegg_track_codec_data' heap buffer overflow vulnerability

Mozilla Firefox is an open source web browser. A buffer overflow vulnerability exists in Mozilla Firefox 'nesteggtrackcodecdata', which allows remote attackers to exploit specially crafted headers in WebM videos to crash an application or execute arbitrary code...

6.8CVSS9.4AI score0.04774EPSS
SaveExploits0References1
NVD
NVD
added 2015/09/24 4:59 a.m.17 views

CVE-2015-4511

Heap-based buffer overflow in the nesteggtrackcodecdata function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via a crafted header in a WebM video...

6.8CVSS7.6AI score0.04774EPSS
SaveExploits0References14
Prion
Prion
added 2015/09/24 4:59 a.m.21 views

Heap overflow

Heap-based buffer overflow in the nesteggtrackcodecdata function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via a crafted header in a WebM video...

6.8CVSS8.4AI score0.04774EPSS
SaveExploits0References14Affected Software2
CVE
CVE
added 2015/09/24 1:0 a.m.137 views

CVE-2015-4511

CVE-2015-4511 is a heap-based buffer overflow in Firefox’s nestegg_track_codec_data used when decoding WebM headers. A crafted header in a WebM video could allow remote code execution. Affected products/versions: Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3. Remediation: upgrade t...

6.8CVSS8.2AI score0.04774EPSS
SaveExploits0References14Affected Software1
Cvelist
Cvelist
added 2015/09/24 1:0 a.m.25 views

CVE-2015-4511

Heap-based buffer overflow in the nesteggtrackcodecdata function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via a crafted header in a WebM video...

8.4AI score0.04774EPSS
SaveExploits0References14
ArchLinux
ArchLinux
added 2015/09/23 12:0 a.m.43 views

firefox: multiple issues

CVE-2015-4500 Memory safety bugs fixed in Firefox ESR 38.3 and Firefox 41: Andrew Osmond, Olli Pettay, Andrew Sutherland, Christian Holler, David Major, Andrew McCreight and Cameron McCormack reported memory safety problems and crashes that affect Firefox ESR 38.2 and Firefox 40. Some of these...

9.3CVSS0.5AI score0.0608EPSS
SaveExploits0References23
UbuntuCve
UbuntuCve
added 2015/09/23 12:0 a.m.23 views

CVE-2015-4511

Heap-based buffer overflow in the nesteggtrackcodecdata function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via a crafted header in a WebM video...

6.8CVSS7.7AI score0.04774EPSS
SaveExploits0References3
OSV
OSV
added 2015/09/23 12:0 a.m.6 views

UBUNTU-CVE-2015-4511

Heap-based buffer overflow in the nesteggtrackcodecdata function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via a crafted header in a WebM video...

6.8CVSS7.9AI score0.04774EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2015/09/22 6:17 p.m.6 views

Mozilla: Buffer overflow while decoding WebM video (MFSA 2015-105)

Heap-based buffer overflow in the nesteggtrackcodecdata function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via a crafted header in a WebM video...

6.8CVSS8AI score0.04774EPSS
SaveExploits0References5
Rows per page
Query Builder