RHEL 4 / 5 : firefox (RHSA-2010:0112)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0112 advisory. - Mozilla incorrectly frees used memory MFSA 2010-03 CVE-2009-1571 - Mozilla violation of same-origin policy due to properties set on...

Google Chrome 'getSVGDocument' Cross-Site Scripting Vulnerability

This host is installed with Google Chrome and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodgooglechromegetsvgdocumentxssvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Google Chrome 'getSVGDocument' Cross-Site Scripting Vulnerability Authors: Sharath S...

Cross site scripting

The getSVGDocument method in Google Chrome before 3.0.195.21 omits an unspecified "access check," which allows remote web servers to bypass the Same Origin Policy and conduct cross-site scripting attacks via unknown vectors, related to a user's visit to a different web server that hosts an SVG...