Lucene search
RedHatRHSA-2012:0143HistoryFeb 16, 2012 - 12:00 a.m.
(RHSA-2012:0143) Critical: xulrunner security update
2012-02-1600:00:00
access.redhat.com
29
0.832 High
EPSS
Percentile
98.5%
XULRunner provides the XUL Runtime environment for applications using the
Gecko layout engine.
A heap-based buffer overflow flaw was found in the way XULRunner handled
PNG (Portable Network Graphics) images. A web page containing a malicious
PNG image could cause an application linked against XULRunner (such as
Firefox) to crash or, potentially, execute arbitrary code with the
privileges of the user running the application. (CVE-2011-3026)
All XULRunner users should upgrade to these updated packages, which correct
this issue. After installing the update, applications using XULRunner must
be restarted for the changes to take effect.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 6 | x86_64 | xulrunner-devel | < 1.9.2.26-2.el6_2 | xulrunner-devel-1.9.2.26-2.el6_2.x86_64.rpm |
| RedHat | 5 | s390x | xulrunner | < 1.9.2.26-2.el5_7 | xulrunner-1.9.2.26-2.el5_7.s390x.rpm |
| RedHat | 5 | s390 | xulrunner-devel | < 1.9.2.26-2.el5_7 | xulrunner-devel-1.9.2.26-2.el5_7.s390.rpm |
| RedHat | 6 | s390x | xulrunner-devel | < 1.9.2.26-2.el6_2 | xulrunner-devel-1.9.2.26-2.el6_2.s390x.rpm |
| RedHat | 5 | x86_64 | xulrunner-devel | < 1.9.2.26-2.el5_7 | xulrunner-devel-1.9.2.26-2.el5_7.x86_64.rpm |
| RedHat | 5 | s390 | xulrunner | < 1.9.2.26-2.el5_7 | xulrunner-1.9.2.26-2.el5_7.s390.rpm |
| RedHat | 6 | s390 | xulrunner-debuginfo | < 1.9.2.26-2.el6_2 | xulrunner-debuginfo-1.9.2.26-2.el6_2.s390.rpm |
| RedHat | 6 | s390x | xulrunner | < 1.9.2.26-2.el6_2 | xulrunner-1.9.2.26-2.el6_2.s390x.rpm |
| RedHat | 6 | s390 | xulrunner | < 1.9.2.26-2.el6_2 | xulrunner-1.9.2.26-2.el6_2.s390.rpm |
| RedHat | 5 | ppc64 | xulrunner | < 1.9.2.26-2.el5_7 | xulrunner-1.9.2.26-2.el5_7.ppc64.rpm |
Related
nessus
nessus
Fedora 15 : libpng-1.2.46-2.fc15 (2012-1930)
2012-02-29 00:00:00
Fedora 16 : libpng10-1.0.57-1.fc16 (2012-2028)
2012-02-29 00:00:00
SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 5838)
2012-02-24 00:00:00
openvas
openvas
Fedora Update for xulrunner FEDORA-2012-1845
2012-03-07 00:00:00
Mandriva Update for mozilla MDVSA-2012:022-1 (mozilla)
2012-03-07 00:00:00
Amazon Linux: Security Advisory (ALAS-2012-49)
2015-09-08 00:00:00
cert
cert
libpng chunk decompression integer overflow vulnerability
2012-02-23 00:00:00
suse
suse
Security update for Mozilla XULrunner (important)
2012-02-27 01:08:16
libpng12: Fixed a heap based buffer overflow (important)
2012-02-28 22:36:59
Security update for libpng (important)
2012-02-28 22:37:10
debian
debian
[SECURITY] [DSA 2410-1] libpng security update
2012-02-15 20:44:25
altlinux
altlinux
Security fix for the ALT Linux 6 package libpng version 1.2.47-alt1
2012-02-20 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: thunderbird-10.0.1-2.fc17
2012-02-28 10:57:39
[SECURITY] Fedora 16 Update: xulrunner-10.0.1-3.fc16
2012-02-19 23:17:56
[SECURITY] Fedora 16 Update: libpng10-1.0.57-1.fc16
2012-02-28 10:04:32
redhat
redhat
(RHSA-2012:0140) Critical: thunderbird security update
2012-02-16 00:00:00
(RHSA-2012:0317) Important: libpng security update
2012-02-20 00:00:00
(RHSA-2012:0142) Critical: firefox security update
2012-02-16 00:00:00
ubuntu
ubuntu
Xulrunner vulnerability
2012-02-17 00:00:00
Thunderbird vulnerability
2012-02-17 00:00:00
Firefox vulnerability
2012-02-17 00:00:00
veracode
veracode
Denial Of Service (DoS)
2018-11-27 06:57:22
oraclelinux
oraclelinux
libpng security update
2012-02-20 00:00:00
xulrunner security update
2012-02-16 00:00:00
firefox security update
2012-02-16 00:00:00
ubuntucve
ubuntucve
CVE-2011-3026
2012-02-16 00:00:00
nvd
nvd
CVE-2011-3026
2012-02-16 20:55:04
centos
centos
libpng, libpng10 security update
2012-02-20 21:59:45
xulrunner security update
2012-02-17 01:35:23
firefox security update
2012-02-17 01:39:20
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2012-11
2012-02-22 00:00:00
amazon
amazon
Important: libpng
2012-03-04 16:09:00
checkpoint_advisories
checkpoint_advisories
libpng png_decompress_chunk Integer Overflow - ver 2 (CVE-2011-3026)
2012-05-10 00:00:00
libpng png_decompress_chunk Integer Overflow (CVE-2011-3026)
2012-05-14 00:00:00
freebsd
freebsd
mozilla -- heap-buffer overflow
2012-02-16 00:00:00
mozilla
mozilla
libpng integer overflow — Mozilla
2012-02-16 00:00:00
prion
prion
Integer overflow
2012-02-16 20:55:00
Integer overflow
2012-03-22 16:55:00
cvelist
cvelist
CVE-2011-3026
2012-02-16 20:00:00
cve
cve
CVE-2011-3026
2012-02-16 20:55:04
threatpost
threatpost
Mozilla to Fix Libpng Bug in Firefox and Thunderbird
2012-02-17 18:43:07