redhat enterprise linux as 3 vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

LibTIFF in Red Hat Enterprise Linux (RHEL) 3 on x86_64 platforms, as used in tiff2rgba, attempts to process image data even when the required compression functionality is not configured, which allows remote malicious users to cause a denial of service via a crafted TIFF image, re...

Redhat Enterprise Linux 3 Redhat Enterprise Linux 3.0

2.1

CVSSv2

The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service (capability stripping) via a failed invocation of a system...

Linux Linux Kernel Redhat Enterprise Mrg 2.0 Redhat Enterprise Linux 5.0 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 7.0

7.2

CVSSv2

The Linux kernel 2.6.0 up to and including 2.6.30.4, and 2.4.4 up to and including 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap t...

Linux Linux Kernel Debian Debian Linux 4.0 Suse Linux Enterprise Real Time 10 Redhat Enterprise Linux Server 5.0 Redhat Enterprise Linux Workstation 5.0 Redhat Enterprise Linux Desktop 4.0 Redhat Enterprise Linux Desktop 5.0 Redhat Enterprise Linux Server 4.0 Redhat Enterprise Linux Workstation 4.0 Redhat Enterprise Linux Server Aus 5.3 Redhat Enterprise Linux Eus 5.3 Redhat Enterprise Linux Eus 4.8

8 EDB exploits4 Github repositories

7.5

CVSSv2

A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

7.5

CVSSv2

A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been destroyed while working with fonts. This results in a potentially exploitable crash. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunde...

7.5

CVSSv2

A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This results in a potentially exploitable crash. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52...

1 EDB exploit

4.3

CVSSv2

Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a targeted user. This can be used to extract history information and read text values across domains. This violates same-origin policy and ...

7.2

CVSSv2

A flaw was found in grub2 in versions before 2.06. Setparam_prefix() in the menu rendering code performs a length calculation on the assumption that expressing a quoted single quote will require 3 characters, while it actually requires 4 characters which allows an malicious user ...

1 Github repository

9.3

CVSSv2

Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 prior to 3.0.11 might allow remote malicious users to execute arbitrary code via a page transition during Java applet loading, related to a use-afte...

Mozilla Firefox Debian Debian Linux 5.0 Fedoraproject Fedora 10 Fedoraproject Fedora 9 Redhat Enterprise Linux Server 5.0 Redhat Enterprise Linux 4.0 Redhat Enterprise Linux Workstation 5.0 Redhat Enterprise Linux 5.0 Redhat Enterprise Linux Desktop 4.0 Redhat Enterprise Linux Desktop 5.0 Redhat Enterprise Linux Server 4.0 Redhat Enterprise Linux Workstation 4.0 Redhat Enterprise Linux Server Aus 5.3 Redhat Enterprise Linux Eus 5.3 Redhat Enterprise Linux Eus 4.8

7.5

CVSSv2

JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

Redhat Enterprise Linux Workstation 5.0 Redhat Enterprise Linux Server Eus 7.5 Redhat Enterprise Linux Desktop 5.0 Redhat Enterprise Linux Server Aus 7.3 Redhat Enterprise Linux Server Aus 7.4 Redhat Enterprise Linux Server Eus 7.3 Redhat Enterprise Linux Server Eus 7.4 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Workstation 6.0 Redhat Enterprise Linux Server 5.0 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Workstation 7.0 Debian Debian Linux 8.0 Mozilla Firefox Esr Mozilla Firefox Mozilla Thunderbird

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook