Mozilla: evalInSanbox location context incorrectly applied (MFSA 2012-93)

The evalInSandbox implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 uses an incorrect context during the handling of JavaScript code that sets the location.href property, which...

CVE-2012-3743

The System Logs implementation in Apple iOS before 6 does not restrict /var/log access by sandboxed apps, which allows remote attackers to obtain sensitive information via a crafted app that reads log files...

CVE-2012-3743

The System Logs implementation in Apple iOS before 6 does not restrict /var/log access by sandboxed apps, which allows remote attackers to obtain sensitive information via a crafted app that reads log files...

CVE-2012-3743

The CVE-2012-3743 entry applies to Apple iOS prior to 6, where the System Logs implementation did not restrict sandboxed apps from reading /var/log. This allowed sandboxed apps to disclose sensitive information from system logs. The described vulnerability is an information disclosure issue with ...

New Trojan Spreading On App Store and Google Play

A new Trojan that uploads users’ phonebooks to a remote server is making the rounds, circulating on both Apple’s App Store and the Google Play marketplaces, according to research by Kaspersky Lab posted on the Securelist web site earlier today. Kaspersky virus researchers, responding to a request...

Google Chrome < 20.0.1132.43 Multiple Vulnerabilities

Binary data 800967.prm...

CVE-2012-2816

Google Chrome before 20.0.1132.43 on Windows does not properly isolate sandboxed processes, which might allow remote attackers to cause a denial of service process interference via unspecified vectors...

Adobe Releases Sandboxed Flash Player for Firefox

Adobe has released a new version of the Flash player that now gives Firefox users the additional security of a sandbox and also includes a background update mechanism for Mac users. Flash has run in a sandbox on Google Chrome and Internet Explorer for some time already. The big security news in...

CVE-2011-3956

Removed by vendor...

Google Chrome < 17.0.963.46 Multiple Vulnerabilities

Binary data 800936.prm...

Google Chrome < 17.0.963.46 Multiple Vulnerabilities

Binary data 6312.pasl...

Use-After-Free Object Lifetime Vulnerability in Chrome Could Allow Sandboxed Remote Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Google Chrome browser versions prior to 6.0.472.59. Microsoft engineers discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor,...

CVE-2011-1185

Google Chrome before 10.0.648.127 does not prevent 1 navigation and 2 close operations on the top location of a sandboxed frame, which has unspecified impact and remote attack vectors...

Design/Logic Flaw

Google Chrome before 10.0.648.127 does not prevent 1 navigation and 2 close operations on the top location of a sandboxed frame, which has unspecified impact and remote attack vectors...

UBUNTU-CVE-2011-1185

Google Chrome before 10.0.648.127 does not prevent 1 navigation and 2 close operations on the top location of a sandboxed frame, which has unspecified impact and remote attack vectors...

CVE-2011-1185

Google Chrome (

CVE-2011-1185

Removed by vendor...

CVE-2011-1185

Google Chrome before 10.0.648.127 does not prevent 1 navigation and 2 close operations on the top location of a sandboxed frame, which has unspecified impact and remote attack vectors...

Researcher Publishes Method for Bypassing Flash Local-with-filesystem Sandbox

A security researcher has published a simple method for bypassing one of the sandboxes that Adobe has implemented to prevent Flash files from taking unwanted or malicious actions on users’ PCs. Billy Rios, a well-known application security researcher, developed a quick method for bypassing the...

Google Adds Flash Sandbox to Chrome Browser

Two weeks after releasing Reader X with its new sandbox security mechanism, Adobe has teamed up with Google to enable a sandboxed version of its Flash software to run in Google Chrome. The two companies said on Wednesday that Google has released a version of Chrome to its developer channel that...