Google Chrome 4.1.249.1059 Cross Origin Bypass in Google URL (GURL)

No description provided by source. Google Chrome 4.1.249.1059 Cross Origin Bypass in Google URL GURL CVE-ID: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1663 Author: Jordi Chancel Software Link: http://googlechromereleases.blogspot.com/2010/04/stable-update-bug-and-security-fixes.html...

Google Chrome 4.1.249.1059 Cross Origin Bypass in Google URL (GURL)

Exploit for windows platform in category remote exploits =================================================================== Google Chrome 4.1.249.1059 Cross Origin Bypass in Google URL GURL =================================================================== Google Chrome 4.1.249.1059 Cross Origi...

CVE-2010-1663

The Google URL Parsing Library aka google-url or GURL in Google Chrome before 4.1.249.1064 allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

CVE-2010-1663

The Google URL Parsing Library aka google-url or GURL in Google Chrome before 4.1.249.1064 allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

Design/Logic Flaw

The Google URL Parsing Library aka google-url or GURL in Google Chrome before 4.1.249.1064 allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

CVE-2010-1663

The CVE-2010-1663 issue concerns Google Chrome’s Google URL Parsing Library (GURL). Affected: Google Chrome versions prior to 4.1.249.1064. Root cause: the GURL component allows bypassing the Same Origin Policy via certain escape characters inside javascript: URLs (e.g., TAB or similar escapes). ...

CVE-2010-1663

Removed by vendor...

CVE-2010-1663

The Google URL Parsing Library aka google-url or GURL in Google Chrome before 4.1.249.1064 allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

SuSE 10 Security Update : Epiphany (ZYPP Patch Number 5889)

The Mozilla XULRunner 1.8.1 engine received backports for security problems in 1.9.0.5. The following security issues were fixed : - Mozilla security researcher mozbugra4 reported that an XBL binding, when attached to an unloaded document, can be used to violate the same-origin policy and execute...

SuSE9 Security Update : snort (YOU Patch Number 11055)

This update fixes an evasion attack on URL parsing. The faulty code is in the httpinspect preprocessor. CVE-2006-2769 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE9 Security Update : Epiphany (YOU Patch Number 12326)

The Mozilla Browser received backports for security problems in 1.8.1.14. The following security issues were fixed : - Mozilla security researcher mozbugra4 reported that an XBL binding, when attached to an unloaded document, can be used to violate the same-origin policy and execute arbitrary...

SuSE 10 Security Update : clamav (ZYPP Patch Number 5769)

Various bugs such as a getunicodename off-by-one buffer overflow, a bug in URL parsing of phishing checks as well as minor other issues have been fixed in clamav. CVE-2008-5050 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

Kaspersky 2010 Remote Memory Corruption / DoS PoC

No description provided by source. Description ============ The vulnerability affects Kaspersky Internet Security 2010 9.0.0.459 antivirus and its brother, the Kaspersky Antivirus 2010 9.0.0.463 version. The exploit was discovered on August 18th 2009. The problem with these two antivirus versions...

Kaspersky 2010 Memory Corruption

Description ============ The vulnerability affects Kaspersky Internet Security 2010 9.0.0.459 antivirus and its brother, the Kaspersky Antivirus 2010 9.0.0.463 version. The exploit was discovered on August 18th 2009. The problem with these two antivirus versions appears when parsing a URL address...

Kaspersky 2010 - Remote Memory Corruption Denial of Service (PoC)

Kaspersky 2010 - Remote Memory Corruption Denial of Service PoC Description ============ The vulnerability affects Kaspersky Internet Security 2010 9.0.0.459 antivirus and its brother, the Kaspersky Antivirus 2010 9.0.0.463 version. The exploit was discovered on August 18th 2009. The problem with...

Kaspersky Antivirus DoS

Infinite loop on parsing URL with large number of dots...

iDefense Security Advisory 08.06.09: Adobe Flash Player URL Parsing Heap Overflow Vulnerability

iDefense Security Advisory 08.06.09 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 06, 2009 I. BACKGROUND Adobe Flash Player is Flash Player is a cross-platform browser plug-in that delivers interactive content for Web experiences. For more information, please visit following page:...

Heap overflow

Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors involving URL parsing...

CVE-2009-1868

Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors involving URL parsing...

CVE-2009-1868

Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors involving URL parsing...