MediaWiki Information Disclosure Vulnerability (CNVD-2015-02411)

MediaWiki is a Wiki program. A security vulnerability exists in MediaWiki. A remote attacker can exploit this vulnerability to bypass SVG filtering and obtain sensitive user information via a mixed-case '@import' string in the style element of an SVG file...

DEBIAN-CVE-2015-2935

MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to bypass the SVG filtering and obtain sensitive user information via a mixed case @import in a style element in an SVG file, as demonstrated by "@imporT."...

Apple QuickTime TeXML Style Element Stack 缓冲区溢出漏洞

No description provided by source...

UBUNTU-CVE-2014-1743

Use-after-free vulnerability in the StyleElement::removedFromDocument function in core/dom/StyleElement.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via crafted...

Buffer overflow

Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted style element in a QuickTime TeXML file...

CVE-2012-3752: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted style element in a QuickTime TeXML file...

PT-2012-4992

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7.3 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted style element in a QuickTime TeXML file. This is due to multiple buffer overflows in the...

Design/Logic Flaw

Use-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a STYLE element...

CVE-2011-3086

Use-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a STYLE element...

CVE-2011-3086: Undefined Security Weakness

Use-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a STYLE element...

CVE-2011-3086

CVE-2011-3086 affects Google Chrome before 19.0.1084.46, where a use-after-free flaw in the STYLE element can be exploited remotely to cause a denial of service and possibly other impacts. The provided documents confirm this CVE is associated with Chrome’s handling of the STYLE element, with expl...

CVE-2011-3086

Use-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a STYLE element...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 112983 Low CVE-2011-3083: Browser crash with video + FTP. Credit to Aki Helin of OUSPG. 113496 Low CVE-2011-3084: Load links from internal pages in their own process. Credit to Brett Wilson of the Chromium development community. 118374 Medium CVE-2011-3085: UI...

PT-2012-1646

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 19.0.1084.46 Apple iTunes affected versions not specified Description The issue is related to a use-after-free vulnerability that can be exploited by remote attackers to cause a denial of service or possibly hav...

Microsoft Internet Explorer 9 STYLE Object Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Cross site scripting

Cross-site scripting XSS vulnerability in functions/mime.php in SquirrelMail before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via a crafted STYLE element in an e-mail message...

PT-2011-3558

Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.22 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via a crafted STYLE element in an e-mail message. Recommendations For versions prior to...

CVE-2011-2023: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in functions/mime.php in SquirrelMail before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via a crafted STYLE element in an e-mail message...

CVE-2010-1029

Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and iPhone OS for iPod touch, and Google Chrome 4.0.249, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary co...

CVE-2010-1029

Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and iPhone OS for iPod touch, and Google Chrome 4.0.249, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary co...