9543 matches found
Microsoft IE Frame标记跨域信息泄露漏洞(MS11-018)
BUGTRAQ ID: 47191 CVE ID: CVE-2011-1244 Windows Internet Explorer，原称Microsoft Internet Explorer，简称MSIE（一般称为Internet Explorer，简称IE），是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer Frame标记在实现上存在跨域信息泄露漏洞，远程攻击者可利用此漏洞访问其他域或安全区域内的内容，获取敏感信息。...
Google Releases Chrome 10.0.648.205
Google has released Chrome 10.0.648.205 for Windows, Mac, Linux, and Chrome Frame to address multiple vulnerabilities including the Adobe Flash vulnerability described in Adobe Security Advisory APSA11-02. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code...
Media Player Classic 6.4.9.1 Denial Of Service
!/usr/bin/perl --------- Media Player Classic v6.4.9.1 .au Proof Of Concept Exploit Author : KedAns-Dz special thanks to : josalijoe exploit-id.com , and All exploit-id Team --------- Tested in Windows XP sp3 France Creating The Bad File .AU And Opening ... Stack Fram : quartz.dll ! 7486e82c ! Po...
Stable Channel Update
The Chrome Stable channel has been updated to 10.0.648.205 for Windows, Mac, Linux and Chrome Frame. This release contains a new version of Adobe Flash which includes a fix for a security vulnerability, as well as the security fixes listed below. Security fixes and rewards: Please see the Chromiu...
Information disclosure
Microsoft Internet Explorer 6, 7, and 8 does not enforce intended domain restrictions on content access, which allows remote attackers to obtain sensitive information or conduct clickjacking attacks via a crafted web site, aka "Frame Tag Information Disclosure Vulnerability."...
CVE-2011-1244
Microsoft Internet Explorer 6, 7, and 8 does not enforce intended domain restrictions on content access, which allows remote attackers to obtain sensitive information or conduct clickjacking attacks via a crafted web site, aka "Frame Tag Information Disclosure Vulnerability."...
CVE-2011-1244: Improper Restriction of Rendered UI Layers or Frames
Microsoft Internet Explorer 6, 7, and 8 does not enforce intended domain restrictions on content access, which allows remote attackers to obtain sensitive information or conduct clickjacking attacks via a crafted web site, aka "Frame Tag Information Disclosure Vulnerability."...
kernel: orinoco: fix TKIP countermeasure behaviour
The orinocoioctlsetauth function in drivers/net/wireless/orinoco/wext.c in the Linux kernel before 2.6.37 does not properly implement a TKIP protection mechanism, which makes it easier for remote attackers to obtain access to a Wi-Fi network by reading Wi-Fi frames...
PT-2011-1062 · Suse +2 · Ext4Dev-Kmp-Trace +4
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.38 Description: The issue is related to the Generic Receive Offload GRO implementation in the Linux kernel. A problem in the napi reuse skb function in net/core/dev.c does not reset the values of certain...
Design/Logic Flaw
Use-after-free vulnerability in the frame-loader implementation in Google Chrome before 10.0.648.204 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...
CVE-2011-1292
Use-after-free vulnerability in the frame-loader implementation in Google Chrome before 10.0.648.204 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...
CVE-2011-1292
Use-after-free vulnerability in the frame-loader implementation in Google Chrome before 10.0.648.204 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...
Google Fixes Six High-Risk Bugs in New Chrome Release
Google has released a new version of its Chrome browser, fixing six high-risk security bugs in the process and paying out $8,500 in bug bounties along the way. The latest version of Chrome, version 10.0.648.204, also includes a number of other new features for some of the supported platforms. The...
CVE-2011-1292: Use After Free
Use-after-free vulnerability in the frame-loader implementation in Google Chrome before 10.0.648.204 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...
Google Releases Chrome 10.0.648.204
Google has released Chrome 10.0.648.204 for Windows, Mac, Linux, and Chrome Frame to address multiple vulnerabilities. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to review the Google Chrome Releases blog entry...
PT-2011-3026
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 10.0.648.204 Description A use-after-free issue in the frame-loader implementation can be exploited by remote attackers to cause a denial of service or possibly have other unspecified impacts. The exact vectors...
Google Releases Chrome 10.0.648.134
Google has released Chrome 10.0.648.134 for Windows, Mac, Linux, and Chrome Frame. This release contains an updated version of the Adobe Flash player that addresses a vulnerability. Exploitation of this vulnerability may allow an attacker to execute arbitrary code. US-CERT encourages users and...
Google Releases Chrome 10.0.648.133
Google has released Chrome 10.0.648.133 for Windows, Mac, Linux, and Chrome Frame. This update addresses a vulnerability that may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to review the Google Chrome Releases blog entry and apply any necessary update...
