chromium-browser: Scheme bypass in PDFium

PDFium, as used in Google Chrome before 47.0.2526.73, does not properly restrict use of chrome: URLs, which allows remote attackers to bypass intended scheme restrictions via a crafted PDF document, as demonstrated by a document with a link to a chrome://settings URL...

FreeBSD : chromium -- multiple vulnerabilities (548f74bd-993c-11e5-956b-00262d5ed8ee)

Google Chrome Releases reports : 41 security fixes in this release, including : - 558589 Critical CVE-2015-6765: Use-after-free in AppCache. Credit to anonymous. - 551044 High CVE-2015-6766: Use-after-free in AppCache. Credit to anonymous. - 554908 High CVE-2015-6767: Use-after-free in AppCache...

chromium: multiple issues

CVE-2015-6764: Out of bounds access in v8. Credit to Guang Gong of Qihoo 360 via pwn2own. - CVE-2015-6765, CVE-2015-6766, CVE-2015-6767: Use-after-free in AppCache. - CVE-2015-6768, CVE-2015-6770, CVE-2015-6772: Cross-origin bypass in DOM. Credit to Mariusz Mlynski. - CVE-2015-6769: Cross-origin...

Stable Channel Update

The Chrome team is delighted to announce the promotion of Chrome 47 to the stable channel for Windows, Mac and Linux. Chrome 47.0.2526.73 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming Chrome and Chromium blog posts about new...

PT-2015-7360

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 47.0.2526.73 Opera versions prior to 47.0.2526.73 no specific version mentioned, but implied to be the same as Google Chrome Description The issue lies in the CSPSourceList::matches function within the Content...

PT-2015-7353

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 47.0.2526.73 Opera affected versions not specified Description The issue allows remote attackers to bypass intended scheme restrictions via a crafted PDF document, as demonstrated by a document with a link to a...

Google Chrome < 43.0.2357.130 Multiple Vulnerabilities

Binary data 8880.pasl...

CVE-2015-4476

Mozilla Firefox before 41.0 on Android allows user-assisted remote attackers to spoof address-bar attributes by leveraging lack of navigation after a paste of a URL with a nonstandard scheme, as demonstrated by spoofing an SSL attribute...

CVE-2015-4476: Undefined Security Weakness

Mozilla Firefox before 41.0 on Android allows user-assisted remote attackers to spoof address-bar attributes by leveraging lack of navigation after a paste of a URL with a nonstandard scheme, as demonstrated by spoofing an SSL attribute...

PT-2015-2161

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 41.0 on Android Description The issue is related to errors in security settings, allowing a remote attacker to modify address-bar attributes after a user inputs a URL. This can be achieved by leveraging a lack...

Design/Logic Flaw

Apple iOS before 9 allows attackers to obtain sensitive information about inter-app communication via a crafted app that conducts an interception attack involving an unspecified URL scheme...

UBUNTU-CVE-2015-5820

WebKit in Apple iOS before 9 allows remote attackers to trigger a dialing action via a crafted 1 tel://, 2 facetime://, or 3 facetime-audio:// URL...

CVE-2015-5835

Apple iOS before 9 allows attackers to obtain sensitive information about inter-app communication via a crafted app that conducts an interception attack involving an unspecified URL scheme...

CVE-2015-5835

CVE-2015-5835 corresponds to an inter-app communication interception vulnerability in Apple iOS prior to 9.0, enabling a crafted app to obtain sensitive information by abusing URL scheme handling. The issue is described as a local/inter-app access risk where a malicious app could intercept URL sc...

CVE-2015-5835: Exposure of Sensitive Information to an Unauthorized Actor

Apple iOS before 9 allows attackers to obtain sensitive information about inter-app communication via a crafted app that conducts an interception attack involving an unspecified URL scheme...

Photon vulnerable to URL whitelist bypass

Overview Photon provided by Newphoria Corporation Inc. is an application for Android built using "applican". Photon contains an issue where an arbitrary page may be loaded if the application is launched using the URL-scheme. Kenta Suefusa and Tomonori Shiomi of Sprout Inc. reported this...

Reversi vulnerable to URL whitelist bypass

Overview Reversi provided by Newphoria Corporation Inc. is an application for both iOS or Android built using "applican". Reversi contains an issue where an arbitrary page may be loaded if the application is launched using the URL-scheme. Kenta Suefusa and Tomonori Shiomi of Sprout Inc. reported...

MEGAPHONE MUSIC vulnerable to URL whitelist bypass

Overview MEGAPHONE MUSIC provided by Newphoria Corporation Inc. is an application for both iOS or Android built using "applican". MEGAPHONE MUSIC contains an issue where an arbitrary page may be loaded if the application is launched using the URL-scheme. Kenta Suefusa and Tomonori Shiomi of Sprou...

Auction Camera vulnerable to URL whitelist bypass

Overview Auction Camera provided by Newphoria Corporation Inc. is an application for both iOS or Android built using "applican". Auction Camera contains an issue where an arbitrary page may be loaded if the application is launched using the URL-scheme. Kenta Suefusa and Tomonori Shiomi of Sprout...

applican vulnerable to URL whitelist bypass

Overview applican provided by Newphoria Corporation Inc. is a platform to build hybrid applications for both iOS and Android. applican provides a whitelisting function whitelist.xml to limit the URLs that applications can access. However, if the application is launched using the URL-scheme, the...