[520422] High CVE-2015-1302: Information leak in PDF viewer.
Credit to Rob Wucvename>CVE-2015-1302
The allocate_buffers function in libavcodec/alac.c in
FFmpeg before 2.7.2 does not initialize certain context
data, which allows remote attackers to cause a denial of
service (segmentation violation) or possibly have
unspecified other impact via crafted Apple Lossless Audio
Codec (ALAC)«à † † ƒ€‚^ _ƒä@¸ †œ ƒl">
CVE-2015-3184: CVE-2015-3187: An integer overflow flaw leading to a heap-based buffer overflow was
discovered in the way the texttopdf utility of cups-filter processed
print jobs with a specially crafted line size. An attacker being able
to submit print jobs could exploit this flaw¸ † †
ƒ$ €ƒ" v< †›h#ƒ"
Subversion's mod_authz_svn does not properly restrict anonymous access
in some mixed anonymous/authenticated environments when
using Apache httpd 2.4.
Subversion servers, both httpd and svnserve, will reveal some
paths that should be hidden by path-based authz3184
This vulnerable function, socket.recvfrom_into(), was introduced in
Python 2.5. Earlier versions are not affected by this flawbid>65379
Special crafted input data may be used to cause a denial of service
against GPG (GnuPG's OpenPGP part) and some other OpenPGP
implementations. All systems using GPG to process incoming data are
affected.4010-05
Unfortnately there is a securiê † † ƒw€ƒu †œ ƒutment MFSA 2012-100 Improper security filtering for cross-origin
wrappers MFSA 2012-101 Improper character decoding in HZ-GB-2312 charset MFSA 2012-102 Script entered into Developer Toolbar runs with
chrome privileges MFSA 2012-103 Frames can shadow top.location MFSA 2012-104 CSS and HTML injection through Style Inspector MFSA 2012-105 Use-after-free and buffer overflow issues found MFSA 2012-106 Use-after-free, buffeðÀ † † ƒ+€‚@ Lº@€i †œ ƒ)ng actively exploited in the
wild, and exploit code is publicly available. This exploit does not only affect Java applets, but every
piece of software that relies on the Java Security Manager for
sandboxing executable code is affected: malicious code can
totally disable Security Manager.
[118018] Medium CVE-2011-3104: Out-of-bounds read in Skia. Credit
to Google Chrome Security Team (Inferno). [120912] High CVE-2011-3105: ý€ † † ƒw€ƒu †œ ƒu1: Use-after-free in subframe loading.
Credit to Arthur Gerkis. [112236] Medium CVE-2011-3022: Inappropriate use of http for
translation script. Credit to Google Chrome Security Team (Jorge
Obes). [112259] Medium CVE-2011-3023: Use-after-free with drag and drop.
Credit to pa_kt. [112451] Low CVE-2011-3024: Browser crash with empty x509
certificate. Credit to chrometot. [112670] Medium CVE-2011-3025: Out-of-bounds read in h.264
ƒ † † ‚} v‚é@€‚l N„Á@ †›AJ‚{ange> The phpMyFAQ Team has learned of a serious security issue that
has been discovered in our bundled ImageManager library we use
in phpMyFAQ 2.6 and 2.7. The bundled ImageManager library
allows injection of arbitrary PHP code via POST requests‰À † † ƒ)€‚ Nƒÿ €& †œ ƒ'rg/pipermail/mediawiki-announce/2011-May/000098.html">
(Bug 28534) XSS vulnerability for IE 6 clients. This is the
third attempt at fixing bug 28235. (Bug 28639) Potential privilege escalation when
$wgBlockDisablesLogin is enabledurl>https://bugzilla.wikimedia.org/show_bug.cgi?id=28534
MFSA 2010-83 Location bar SSL spoofing using network error page
MFSA 2010-84 XSS hazard in multiple character encodingscvename>CVE-2010-3766
MFSA 2010-05 XSS hazard using SVG document and binary Content-Type
MFSA 2010-04 XSS due to window.dialogArguments being readable cross-domain
MFSA 2010-03 Use-after-free crash in HTML parser
MFSA 2010-02 Web Worker Array Handling Heap Corruption Vulnerability
MFSA 2010-01 Crashes with evidence of memory corruption (rv:1.9.1.8/ 1.9.0.18)¢À † † ‚<‡ Eƒ¢@€| v‚ú €7 †œ ‚:-- heapsubversion