9451 matches found
Google Chrome Frame < 4.0.245.1
The version of Google Chrome Frame installed on the remote host is earlier than 4.0.245.1. Such versions are affected by a vulnerability that may allow an attacker to bypass cross-origin protections. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Microsoft Finds Security Flaw in Google Chrome Frame
Back in September, when Google launched the Google Chrome Frame plug-in for Internet Explorer users, Microsoft immediately warned that the move would increase the attack surface and make IE users less secure. Now comes word that a security researcher in the Microsoft Vulnerability Research MSVR h...
Fedora Core 12 FEDORA-2009-11487 (qt)
The remote host is missing an update to qt announced via advisory FEDORA-2009-11487. OpenVAS Vulnerability Test $Id: fcore200911487.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-11487 qt Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...
Fedora Core 10 FEDORA-2009-11488 (qt)
The remote host is missing an update to qt announced via advisory FEDORA-2009-11488. OpenVAS Vulnerability Test $Id: fcore200911488.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-11488 qt Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...
Fedora Core 11 FEDORA-2009-11491 (qt)
The remote host is missing an update to qt announced via advisory FEDORA-2009-11491. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Fedora 10 : qt-4.5.3-9.fc10 (2009-11488)
A security flaw was found in the WebKit's Cross-Origin Resource Sharing CORS implementation. Multiple security flaws integer underflow, invalid pointer dereference, buffer underflow and a denial of service were found in the way WebKit's FTP parser used to process remote FTP directory listings. No...
Fedora 12 : qt-4.5.3-9.fc12 (2009-11487)
A security flaw was found in the WebKit's Cross-Origin Resource Sharing CORS implementation. Multiple security flaws integer underflow, invalid pointer dereference, buffer underflow and a denial of service were found in the way WebKit's FTP parser used to process remote FTP directory listings. No...
CVE-2009-2816
The implementation of Cross-Origin Resource Sharing CORS in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to...
Cross site request forgery (csrf)
The implementation of Cross-Origin Resource Sharing CORS in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to...
CVE-2009-2816
The implementation of Cross-Origin Resource Sharing CORS in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to...
CVE-2009-2816
Technical details for CVE-2009-2816 are not provided in the connected documents. The materials mention WebKit/CORS context and related products, but no concrete exploit specifics, impacted versions, or fixes are included. Monitor for updates.
CVE-2009-2816
The implementation of Cross-Origin Resource Sharing CORS in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to...
Mac OS X : Apple Safari < 4.0.4
The version of Apple Safari installed on the remote Mac OS X host is earlier than 4.0.4. As such, it is potentially affected by several issues : - Multiple use-after-free issues exist in libxml2, the most serious of which could lead to a program crash. CVE-2009-2414, CVE-2009-2416 - An issue in t...
Safari < 4.0.4 Multiple Vulnerabilities
Binary data 5232.prm...
Safari < 4.0.4 Multiple Vulnerabilities
Binary data 801003.prm...
Mozilla Issues Critical Firefox Security Bulletins
Mozilla has released Firefox 3.5.4 with fixes for a wide range of serious security vulnerabilities. The most serious issue could allow a malicious hacker to take complete control of a computer by simply tricking a user into visiting a rigged Web page. In all, Mozilla released 11 advisories, six...
Mozilla Foundation Security Advisory 2009-61
Mozilla Foundation Security Advisory 2009-61 Title: Cross-origin data theft through document.getSelection Impact: Moderate Announced: October 27, 2009 Reporter: Gregory Fleischer Products: Firefox 3 Fixed in: Firefox 3.5.4 Firefox 3.0.15 This vulnerability does not affect products based on the...
Firefox cross-origin data theft through document.getSelection()
content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allows user-assisted remote attackers to bypass the Same Origin Policy and read an arbitrary content selection via the document.getSelection function...
Cross-origin data theft through document.getSelection() — Mozilla
Security researcher Gregory Fleischer reported that text within a selection on a web page can be read by JavaScript in a different domain using the document.getSelection function, violating the same-origin policy. Since this vulnerability requires user interaction to exploit, its severity was...