PT-2021-2246

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 89.0.4389.72 Description The issue is related to incorrect security UI in TabStrip and Navigation, allowing a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. This could...

KLA12106 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A heap buff...

Google Chrome TabStrip Code Execution

The vulnerability of the TabStrip control element in Google Chrome browsers is caused by buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted web page...

PT-2021-2528

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 89.0.4389.114 Description: The issue is related to a heap buffer overflow in the TabStrip component of Google Chrome on Windows, which could allow a remote attacker to exploit heap corruption via a crafted HTML...

PT-2021-2266

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 89.0.4389.72 Description: The issue is related to a heap buffer overflow in the TabStrip element of Google Chrome, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. This...

PT-2021-2264

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 89.0.4389.72 Description: The issue is related to a heap buffer overflow in the TabStrip element of Google Chrome, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. This...

TabStrip Module Google Chrome Data Compromise

The vulnerability of the TabStrip module in Google Chrome browser is related to the lack of standard permission mechanisms. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially created extension...

Microsoft Windows Common Controls Remote Code Execution - Ver2 (CVE-2012-1856)

A code execution vulnerability has been reported in the Windows Common Controls. The vulnerability is due to a corruption of the system state by the TabStrip ActiveX control. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected syst...

VulnCheck KEV: CVE-2012-1856

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted 1 document or 2 web page that triggers system-state corruption...

Design/Logic Flaw

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerc...

CVE-2012-1856

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerc...

CVE-2012-1856: Undefined Security Weakness

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerc...

PT-2010-1179 · Microsoft · Sql Server +5

Name of the Vulnerable Software and Affected Versions: Microsoft Office versions 2003 SP3, 2007 SP2 and SP3, 2010 SP1 Microsoft SQL Server versions 2000 SP4, 2005 SP4, 2008 SP2, SP3, R2, R2 SP1, and R2 SP2 Microsoft Commerce Server versions 2002 SP4, 2007 SP2, 2009 Gold and R2 Microsoft Host...