Articles by KENNETH

USN-4648-1: WebKitGTK vulnerabilities A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution. Source: USN-4648-1: WebKitGTK vulnerabilities

USN-4647-1: Thunderbird vulnerabilities Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across origins, bypass security restrictions, conduct phishing attacks, conduct cross-site scripting (XSS) attacks, bypass Content Security Policy (CSP) restrictions, conduct DNS rebinding attacks, or execute arbitrary code. Source: USN-4647-1: Thunderbird vulnerabilities

USN-4646-1: poppler vulnerabilities It was discovered that Poppler incorrectly handled certain files. If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause a denial of service. Source: USN-4646-1: poppler vulnerabilities

USN-4645-1: Mutt vulnerability It was discovered that Mutt incorrectly handled certain connections. An attacker could possibly use this issue to expose sensitive information. Source: USN-4645-1: Mutt vulnerability