CVE-2012-2852

CVE-2012-2852 affects Google Chrome's PDF viewer: the PDF object linkage handling is flawed, enabling a use-after-free in the PDF viewer that could lead to a denial of service (and possibly other impact) via a crafted document. Affected versions are Chrome on Mac OS X and Linux prior to 21.0.1180...

CVE-2012-2852

Removed by vendor...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: Linux only 125225 Medium CVE-2012-2846: Cross-process interference in renderers. Credit to Google Chrome Security Team Julien Tinnes. 127522 Low CVE-2012-2847: Missing re-prompt to user upon excessive downloads. Credit to Matt Austin of Aspect Security. 127525 Medi...

Stable Channel Release

The Chrome team is excited to announce the release of Chrome 21 to the Stable Channel. 21.0.1180.57for Mac and Linux. 21.0.1180.60 for Windowsand Chrome Frame. Chrome 21 contains a number of new features including a new API forhigh-quality video and audio communication.More detailed updates are...

Google Chrome < 14.0.835.163 Multiple Vulnerabilities (Sep 2011) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-2852

The CVE-2011-2852 entry concerns Google Chrome's V8 engine, where an Off-by-one error in V8 (as shipped in Chrome prior to 14.0.835.163) may allow a remote attacker to cause a denial of service or potentially other impact via unknown vectors. Affected product/component: Google Chrome using V8. Ro...

CVE-2010-2852

CVE-2010-2852 is a reflected cross-site scripting (XSS) vulnerability in RunCms 2.1, triggered in the headlines/magpierss/scripts/magpie_debug.php file when the Headlines module is enabled. The attacker can inject arbitrary web script or HTML via the url parameter, potentially harming users who v...

CVE-2005-2852

creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16832 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/netware/smb/lsasscifs.rb 2025-02-06 03:13:38+00:00| seen|...

CVE-2009-2852

WP-Syntax plugin 0.9.1 and earlier for Wordpress, with registerglobals enabled, allows remote attackers to execute arbitrary PHP code via the testfilterwphead array parameter to test/index.php, which is used in a call to the calluserfuncarray function...

CVE-2009-2852

CVE-2009-2852 (WP-Syntax) affects WordPress WP-Syntax plugin versions

Fedora Core 10 FEDORA-2009-2852 (krb5)

The remote host is missing an update to krb5 announced via advisory FEDORA-2009-2852. OpenVAS Vulnerability Test $Id: fcore20092852.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2852 krb5 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Fedora Core 10 FEDORA-2009-2852 (krb5)

The remote host is missing an update to krb5 announced via advisory FEDORA-2009-2852. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CGIWrap Charset Specification Weakness Error Message XSS

The remote host is running CGIWrap, a wrapper for CGI scripts to provide enhanced security. The version of CGIWrap installed on the remote host does not specify a charset when responses are for error pages. An attacker may be able to leverage this issue to inject arbitrary HTML and script code in...

CVE-2008-2852

Cross-site scripting XSS vulnerability in CGIWrap before 4.1, when an Internet Explorer based browser is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to failure to set the charset in error messages...

CVE-2008-2852

Cross-site scripting XSS vulnerability in CGIWrap before 4.1, when an Internet Explorer based browser is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to failure to set the charset in error messages...

CVE-2008-2852

CGIWrap before 4.1 is affected by CVE-2008-2852, an XSS due to error messages not specifying a charset. When using Internet Explorer-based browsers, attackers could inject arbitrary HTML/JS via error responses. The OpenVAS/Nessus/VM sources confirm the IE-specific vector and the CGIWrap XSS descr...

Novell NetWare LSASS CIFS.NLM Driver Stack Buffer Overflow

This module exploits a stack buffer overflow in the NetWare CIFS.NLM driver. Since the driver runs in the kernel space, a failed exploit attempt can cause the OS to reboot. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2007-2852

Multiple stack-based buffer overflows in ESET NOD32 Antivirus before 2.70.37.0 allow remote attackers to execute arbitrary code during 1 delete/disinfect or 2 rename operations via a crafted directory name...

CVE-2007-2852

CVE-2007-2852 affects ESET NOD32 Antivirus prior to 2.70.37.0. It describes two stack-based buffer overflows triggered during delete/disinfect or rename operations via a crafted directory name, enabling remote code execution. A fix is available in version 2.70.37.0; upgrading to that version or a...

CVE-2007-2852

Multiple stack-based buffer overflows in ESET NOD32 Antivirus before 2.70.37.0 allow remote attackers to execute arbitrary code during 1 delete/disinfect or 2 rename operations via a crafted directory name...