iceape vulnerabilities (Mageia)
472 vulnerabilities.
iceapeMageiaA buffer overflow vulnerability while parsing "application/http-index-format" format content when...7.5 HighiceapeMageiaAn out-of-bounds write vulnerability while decoding improperly formed BinHex format archives....9.8 CriticaliceapeMageiaA use-after-free vulnerability during changes in style when manipulating DOM elements. This...9.8 CriticaliceapeMageiaA use-after-free vulnerability when holding a selection during scroll events. This results in a...9.8 CriticaliceapeMageiaA use-after-free vulnerability during XSLT processing due to a failure to propagate error...9.8 CriticaliceapeMageiaA use-after-free vulnerability during XSLT processing due to poor handling of template parameters...9.8 CriticaliceapeMageiaA use-after-free vulnerability during XSLT processing due to the result handler being held by a...9.8 CriticaliceapeMageiaAn out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite...8.8 HighiceapeMageiaA use-after-free vulnerability occurs during transaction processing in the editor during design...9.8 CriticaliceapeMageiaA use-after-free vulnerability occurs when redirecting focus handling which results in a...9.8 CriticaliceapeMageiaA use-after-free vulnerability in SMIL animation functions occurs when pointers to animation...9.8 CriticaliceapeMageiaA use-after-free vulnerability occurs during certain text input selection resulting in a...9.8 CriticaliceapeMageiaMemory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these...9.8 CriticaliceapeMageiaMemory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird...9.8 CriticaliceapeMageiaThe Mozilla Windows updater can be called by a non-privileged user to delete an arbitrary local...5.5 MediumiceapeMageiaA non-existent chrome.manifest file will attempt to be loaded during startup from the primary...5.5 MediumiceapeMageiaOn Linux, if the secure computing mode BPF (seccomp-bpf) filter is running when the Gecko Media...5.3 MediumiceapeMageiaIf a malicious site uses the "view-source:" protocol in a series within a single hyperlink, it...7.5 HighiceapeMageiaA malicious site could spoof the contents of the print preview window if popup windows are...7.5 HighiceapeMageiaA "javascript:" url loaded by a malicious page can obfuscate its location by blanking the URL...6.5 MediumiceapeMageiaIf a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI...7.5 HighiceapeMageiaAn out of bounds read error occurs when parsing some HTTP digest authorization responses,...5.3 MediumiceapeMageiaWhen dragging content from the primary browser pane to the addressbar on a malicious site, it is...5.3 MediumiceapeMageiaIn certain circumstances a networking event listener can be prematurely released. This appears to...7.5 HighiceapeMageiaAn attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by "blob:"...5.3 MediumiceapeMageiaThe file picker dialog can choose and display the wrong local default directory when instantiated...5.5 MediumiceapeMageiaA segmentation fault can occur during some bidirectional layout operations. This vulnerability...9.8 CriticaliceapeMageiaA buffer overflow read during SVG filter color value operations, resulting in data exposure. This...7.5 HighiceapeMageiaMemory corruption resulting in a potentially exploitable crash during garbage collection of...9.8 CriticaliceapeMageiaVideo files loaded video captions cross-origin without checking for the presence of CORS headers...5.3 MediumiceapeMageiaUsing SVG filters that don't use the fixed point math implementation on a target iframe, a...6.5 MediumiceapeMageiaA segmentation fault can occur in the Skia graphics library during some canvas operations due to...7.5 HighiceapeMageiaCertain response codes in FTP connections can result in the use of uninitialized values for ports...5.3 MediumiceapeMageiaA use-after-free error can occur when manipulating ranges in selections with one node inside a...9.8 CriticaliceapeMageiaWhen adding a range to an object in the DOM, it is possible to use "addRange" to add the range to...9.8 CriticaliceapeMageiaA use-after-free can occur when events are fired for a "FontFace" object after the object has...9.8 CriticaliceapeMageiaA crash triggerable by web content in which an "ErrorResult" references unassigned memory due to...9.8 CriticaliceapeMageiaJIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP...9.8 CriticaliceapeMageiaMemory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory...9.8 CriticaliceapeMageiaMemory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of...9.8 CriticaliceapeMageiaA use-after-free vulnerability in the Media Decoder when working with media files when some...9.8 CriticaliceapeMageiaThe "mozAddonManager" allows for the installation of extensions from the CDN for addons.mozilla...6.1 MediumiceapeMageiaSpecial "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages...9.8 CriticaliceapeMageiaThe JSON viewer in the Developer Tools uses insecure methods to create a communication channel...9.8 CriticaliceapeMageiaWebExtensions could use the "mozAddonManager" API by modifying the CSP headers on sites with the...6.1 MediumiceapeMageiaA STUN server in conjunction with a large number of "webkitRTCPeerConnection" objects can be used...7.5 HighiceapeMageiaThe existence of a specifically requested local file can be found due to the double firing of the...3.3 LowiceapeMageiaWebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions...7.3 HighiceapeMageiaData sent with in multipart channels, such as the multipart/x-mixed-replace MIME type, will...7.5 HighiceapeMageiaProxy Auto-Config (PAC) files can specify a JavaScript function called for all URL requests with...5.9 Medium- Show moreLoading…