CVE-2018-6126

Related Files

Skia SkScan::FillPath Heap Overflow

Posted Jul 26, 2018

Authored by Ivan Fratric, Google Security Research

There is a heap overflow in Skia when drawing paths with anti-aliasing turned off. This issue can be triggered in both Google Chrome and Mozilla Firefox by rendering a specially crafted SVG image. Proof of concepts included.

tags | exploit, overflow, proof of concept

advisories | CVE-2018-6126

SHA-256 | 3f160181c8497dc4cf1f1145b96c07f641ce5f7ac700a9824ddcbbf59315795b

Download | Favorite | View

Debian Security Advisory 4237-1

Posted Jul 3, 2018

Authored by Debian | Site debian.org

Debian Linux Security Advisory 4237-1 - Several vulnerabilities have been discovered in the chromium web browser.

tags | advisory, web, vulnerability

systems | linux, debian

advisories | CVE-2018-6118, CVE-2018-6120, CVE-2018-6121, CVE-2018-6122, CVE-2018-6123, CVE-2018-6124, CVE-2018-6125, CVE-2018-6126, CVE-2018-6127, CVE-2018-6129, CVE-2018-6130, CVE-2018-6131, CVE-2018-6132, CVE-2018-6133, CVE-2018-6134, CVE-2018-6135, CVE-2018-6136, CVE-2018-6137, CVE-2018-6138, CVE-2018-6139, CVE-2018-6140, CVE-2018-6141, CVE-2018-6142, CVE-2018-6143, CVE-2018-6144, CVE-2018-6145, CVE-2018-6147, CVE-2018-6148

SHA-256 | 87dfa3d834f2c582296fcb795eb91850f979b0960217effc608d092e66e389cd

Download | Favorite | View

Red Hat Security Advisory 2018-2112-01

Posted Jun 29, 2018

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2018-2112-01 - Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 60.1.0 ESR. Issues addressed include buffer overflow, cross site request forgery, and use-after-free vulnerabilities.

tags | advisory, web, overflow, vulnerability, csrf

systems | linux, redhat

advisories | CVE-2017-7762, CVE-2018-12359, CVE-2018-12360, CVE-2018-12362, CVE-2018-12363, CVE-2018-12364, CVE-2018-12365, CVE-2018-12366, CVE-2018-5156, CVE-2018-5188, CVE-2018-6126

SHA-256 | c83b51fc510827e3da5f97c2bdaefb75707217c460d8a14d5c67b9cf283e90fa

Download | Favorite | View

Red Hat Security Advisory 2018-2113-01

Posted Jun 29, 2018

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2018-2113-01 - Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 60.1.0 ESR. Issues addressed include buffer overflow, cross site request forgery, and use-after-free vulnerabilities.

tags | advisory, web, overflow, vulnerability, csrf

systems | linux, redhat

advisories | CVE-2017-7762, CVE-2018-12359, CVE-2018-12360, CVE-2018-12362, CVE-2018-12363, CVE-2018-12364, CVE-2018-12365, CVE-2018-12366, CVE-2018-5156, CVE-2018-5188, CVE-2018-6126

SHA-256 | 733eefe7a714bfbb481e79af2fb8c94cc9b1e0409edce093a2e253f22750db8e

Download | Favorite | View

Ubuntu Security Notice USN-3682-1

Posted Jun 12, 2018

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 3682-1 - A heap buffer overflow was discovered in Skia. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service, or execute arbitrary code.

tags | advisory, denial of service, overflow, arbitrary

systems | linux, ubuntu

advisories | CVE-2018-6126

SHA-256 | 494f9b017be16951b96c87f973088ab519f111541e946ab28bd1de038e9136ed

Download | Favorite | View

Debian Security Advisory 4220-1

Posted Jun 8, 2018

Authored by Debian | Site debian.org

Debian Linux Security Advisory 4220-1 - Ivan Fratric discovered a buffer overflow in the Skia graphics library used by Firefox, which could result in the execution of arbitrary code.

tags | advisory, overflow, arbitrary

systems | linux, debian

advisories | CVE-2018-6126

SHA-256 | 20dac8da2aa3b0850230e9839582a70df5eb615fb9c785abfc18ecae374e9b7d

Download | Favorite | View

Red Hat Security Advisory 2018-1815-01

Posted Jun 7, 2018

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2018-1815-01 - Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 67.0.3396.62. Issues addressed include buffer overflow and bypass vulnerabilities.

tags | advisory, web, overflow, vulnerability

systems | linux, redhat

advisories | CVE-2018-6123, CVE-2018-6124, CVE-2018-6125, CVE-2018-6126, CVE-2018-6127, CVE-2018-6129, CVE-2018-6130, CVE-2018-6131, CVE-2018-6132, CVE-2018-6133, CVE-2018-6134, CVE-2018-6135, CVE-2018-6136, CVE-2018-6137, CVE-2018-6138, CVE-2018-6139, CVE-2018-6140, CVE-2018-6141, CVE-2018-6142, CVE-2018-6143, CVE-2018-6144, CVE-2018-6145, CVE-2018-6147

SHA-256 | 8f57ce73f4ddf5a4287d9acccf2d60250bcada5d5d6f932a11ac26b81f6dce4a

Download | Favorite | View