[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247621

 
 

909

 
 

194512

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-2489-1 iceape -- several vulnerabilities

ID: oval:org.secpod.oval:def:600829Date: (C)2012-06-21   (M)2022-10-10
Class: PATCHFamily: unix




Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of Seamonkey. CVE-2012-1937 Mozilla developers discovered several memory corruption bugs, which may lead to the execution of arbitrary code. CVE-2012-1940 Abhishek Arya discovered a use-after-free problem when working with column layout with absolute positioning in a container that changes size, which may lead to the execution of arbitrary code. CVE-2012-1947 Abhishek Arya discovered a heap buffer overflow in utf16 to latin1 character set conersion, allowing to execute arbitray code.

Platform:
Debian 6.0
Product:
iceape
Reference:
DSA-2489-1
CVE-2012-1937
CVE-2012-1940
CVE-2012-1947
CVE    3
CVE-2012-1940
CVE-2012-1947
CVE-2012-1937
CPE    2
cpe:/a:debian:iceape
cpe:/o:debian:debian_linux:6.0

© SecPod Technologies