3884 matches found
CVE-2013-1696
Mozilla Firefox before 22.0 does not properly enforce the X-Frame-Options protection mechanism, which allows remote attackers to conduct clickjacking attacks via a crafted web site that uses the HTTP server push feature with multipart responses...
Design/Logic Flaw
Mozilla Firefox before 22.0 does not properly enforce the X-Frame-Options protection mechanism, which allows remote attackers to conduct clickjacking attacks via a crafted web site that uses the HTTP server push feature with multipart responses...
CVE-2013-1696
CVE-2013-1696 affects Mozilla Firefox prior to 22.0 where X-Frame-Options protection is not enforced when using server push with multipart responses, enabling clickjacking via crafted pages. The issue is tracked in MFSA 2013-58 and was addressed by Mozilla in Firefox 22.0 and later. OpenSUSE/NVD ...
CVE-2013-1696
Mozilla Firefox before 22.0 does not properly enforce the X-Frame-Options protection mechanism, which allows remote attackers to conduct clickjacking attacks via a crafted web site that uses the HTTP server push feature with multipart responses...
Mozilla Firefox < 22.0 Multiple Vulnerabilities
Binary data 6886.prm...
Google Chrome Flash插件点击劫持漏洞(CVE-2013-2866)
CVE ID: CVE-2013-2866 Google Chrome是一款流行的WEB浏览器 Google Chrome在处理嵌入的Flash元素的opacity属性时存在错误，允许攻击者诱使用户点击由Flash设置伪装成的正常图形元素，可获取对系统摄像头和话筒的访问 0 Google Chrome 27.x Google Chrome 27.0.1453.116已经修复此漏洞，建议用户下载更新： http://www.google.com/chrome...
Mozilla Firefox < 22.0 Multiple Vulnerabilities
Binary data 801353.prm...
CVE-2013-1696
Mozilla Firefox before 22.0 does not properly enforce the X-Frame-Options protection mechanism, which allows remote attackers to conduct clickjacking attacks via a crafted web site that uses the HTTP server push feature with multipart responses...
X-Frame-Options ignored when using server push with multi-part responses — Mozilla
Bugzilla developer Frédéric Buclin reported that the X-Frame-Options header is ignored when server push is used in multi-part responses. This can lead to potential clickjacking on sites that use X-Frame-Options as a protection...
Google Chrome Clickjacking Vulnerability June13 (Windows)
The host is installed with Google Chrome and is prone to Clickjacking vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromeclickjackingvulnjun13win.nasl 6086 2017-05-09 09:03:30Z teissa $ Google Chrome Clickjacking Vulnerability June13 Windows Authors: Arun Kallavi Copyright: Copyright c...
Google Chrome Clickjacking Vulnerability June13 (MAC OS X)
The host is installed with Google Chrome and is prone to Clickjacking vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromeclickjackingvulnjun13macosx.nasl 6104 2017-05-11 09:03:48Z teissa $ Google Chrome Clickjacking Vulnerability June13 MAC OS X Authors: Arun Kallavi Copyright: Copyrigh...
Google Chrome Clickjacking Vulnerability (Jun 2013) - Windows
Google Chrome is prone to Clickjacking vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Google Chrome Clickjacking Vulnerability (Jun 2013) - Mac OS X
Google Chrome is prone to Clickjacking vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-2866
The Flash plug-in in Google Chrome before 27.0.1453.116, as used on Google Chrome OS before 27.0.1453.116 and separately, does not properly determine whether a user wishes to permit camera or microphone access by a Flash application, which allows remote attackers to obtain sensitive information...
CVE-2013-2866
The Flash plug-in in Google Chrome before 27.0.1453.116, as used on Google Chrome OS before 27.0.1453.116 and separately, does not properly determine whether a user wishes to permit camera or microphone access by a Flash application, which allows remote attackers to obtain sensitive information...
Design/Logic Flaw
The Flash plug-in in Google Chrome before 27.0.1453.116, as used on Google Chrome OS before 27.0.1453.116 and separately, does not properly determine whether a user wishes to permit camera or microphone access by a Flash application, which allows remote attackers to obtain sensitive information...
CVE-2013-2866
CVE-2013-2866 affects Google Chrome and Chrome OS where the Flash plugin's handling of an embedded Flash element’s opacity allowed a clickjacking technique to trick users into granting camera or microphone access. Root cause: improper determination of user consent for Flash-permission requests, e...
CVE-2013-2866
The Flash plug-in in Google Chrome before 27.0.1453.116, as used on Google Chrome OS before 27.0.1453.116 and separately, does not properly determine whether a user wishes to permit camera or microphone access by a Flash application, which allows remote attackers to obtain sensitive information...
Google Chrome Inbuilt Flash player allows Webcam Hacking
No longer limited to Hollywood movies about cybercrime, webcam hacking has stealthily and aggressively broken into average households "I've heard a hacker could access my webcam and watch me in front of my computer. Could this really happen?" YES, other than using a Remote administration tools, i...
Google Chrome Inbuilt Flash player allows Webcam Hacking
No longer limited to Hollywood movies about cybercrime, webcam hacking has stealthily and aggressively broken into average households "I've heard a hacker could access my webcam and watch me in front of my computer. Could this really happen?" YES, other than using a Remote administration tools, i...