6605 matches found
[SECURITY] [DSA 2732-1] chromium-browser security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2732-1 [email protected] http://www.debian.org/security/ Michael Gilbert July 31, 2013 http://www.debian.org/security/faq -...
DSA-2732-1 chromium-browser - several
Bulletin has no description...
Debian Security Advisory DSA 2732-1 (chromium-browser - several vulnerabilities)
Several vulnerabilities have been discovered in the Chromium web browser. CVE-2013-2881 Karthik Bhargavan discovered a way to bypass the Same Origin Policy in frame handling. CVE-2013-2882 Cloudfuzzer discovered a type confusion issue in the V8 javascript library. CVE-2013-2883 Cloudfuzzer...
Google Chrome < 28.0.1500.95 Multiple Vulnerabilities
Binary data 801428.prm...
Stable Channel Update
The Stable channel has been updated to 28.0.1500.95 for Chrome Frame, Linux, Mac, and Windows. Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. This commonly occurs if the bug exists in a third party library that other projects similar...
chromium -- multiple vulnerabilities
Google Chrome Releases reports: Eleven vulnerabilities, including: 257748 Medium CVE-2013-2881: Origin bypass in frame handling. Credit to Karthik Bhargavan. 260106 High CVE-2013-2882: Type confusion in V8. Credit to Cloudfuzzer. 260165 High CVE-2013-2883: Use-after-free in MutationObserver. Cred...
Debian DSA-2724-1 : chromium-browser - several vulnerabilities
Several vulnerabilities have been discovered in the Chromium web browser. - CVE-2013-2853 The HTTPS implementation does not ensure that headers are terminated by \r\n\r\n carriage return, newline, carriage return, newline. - CVE-2013-2867 Chrome does not properly prevent pop-under windows. -...
CVE-2013-2871
Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of input...
Design/Logic Flaw
Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of input...
CVE-2013-2871
Removed by vendor...
chromium -- multiple vulnerabilities
Google Chrome Releases reports: A special reward for Andrey Labunets for his combination of CVE-2013-2879 and CVE-2013-2868 along with some since fixed server-side bugs. 252216 Low CVE-2013-2867: Block pop-unders in various scenarios. 252062 High CVE-2013-2879: Confusion setting up sign-in and...
Google Chrome Multiple Vulnerabilities-01 June13 (MAC OS X)
The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvuln01jun13macosx.nasl 6104 2017-05-11 09:03:48Z teissa $ Google Chrome Multiple Vulnerabilities-01 June13 MAC OS X Authors: Arun Kallavi Copyright: Copyright c 201...
CVE-2013-2856
Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of input...
CVE-2013-2856
CVE-2013-2856 is a use-after-free vulnerability in Chromium/Google Chrome prior to version 27.0.1453.110, with impact described as denial of service or possibly other unspecified effects via vectors related to input handling. Connected documents confirm this CVE is among several Chromium/Chrome i...
CVE-2013-2856
Removed by vendor...
kernel: ext3: format string issues
fs/ext3/super.c in the Linux kernel before 3.8.4 uses incorrect arguments to functions in certain circumstances related to printk input, which allows local users to conduct format-string attacks and possibly gain privileges via a crafted application...
Report OWASP WAF Naxsi bypass Vulnerability
OWASP WAF Naxsi bypass Vulnerability Certain unspecified input is not properly handed in naxsisrc/naxsiutils.c naxsiunescapeuriuchar dst, uchar src, sizet size, ngxuintt type before being used to filtered. This can be exploited to bypass some WAF rules. Naxsi site https://code.google.com/p/naxsi/...
Debian DSA-2661-1 : xorg-server - information disclosure
David Airlie and Peter Hutterer of Red Hat discovered that xorg-server, the X.Org X server was vulnerable to an information disclosure flaw related to input handling and devices hotplug. When an X server is running but not on front for example because of a VT switch, a newly plugged input device...
[SECURITY] [DSA 2661-1] xorg-server security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2661-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez April 17, 2013 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2661-1 (xorg-server - information disclosure)
David Airlie and Peter Hutterer of Red Hat discovered that xorg-server, the X.Org X server was vulnerable to an information disclosure flaw related to input handling and devices hotplug. When an X server is running but not on front for example because of a VT switch, a newly plugged input device...