590 matches found
Code injection
Unspecified vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to spoof the URL bar via unknown vectors...
CVE-2011-1107
Unspecified vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to spoof the URL bar via unknown vectors...
CVE-2011-1107
Unspecified vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to spoof the URL bar via unknown vectors...
CVE-2011-1107
Removed by vendor...
Google Fixes 19 Bugs in Chrome, Pays $14K in Bug Bounties
Google has released version 9.0.597.107 of its Chrome browser, fixing 19 security vulnerabilities and paying $14,000 in rewards to researchers in the process. The new version of Chrome, which Google released on Monday afternoon, includes fixes for 16 high-severity vulnerabilities and three bugs...
CVE-2011-1107: Undefined Security Weakness
Unspecified vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to spoof the URL bar via unknown vectors...
PT-2011-2872
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 9.0.597.107 Description The issue allows remote attackers to spoof the URL bar via unknown vectors. Recommendations For versions prior to 9.0.597.107, update to version 9.0.597.107 or later to resolve the issue...
chromium -- multiple vulnerabilities
Google Chrome Releases reports: Fixed in 15.0.874.121: 103259 High CVE-2011-3900: Out-of-bounds write in v8. Credit to Christian Holler. Fixed in 15.0.874.120: 100465 High CVE-2011-3892: Double free in Theora decoder. Credit to Aki Helin of OUSPG. 100492 100543 Medium CVE-2011-3893: Out of bounds...
CVE-2010-3247
Google Chrome before 6.0.472.53 does not properly restrict the characters in URLs, which allows remote attackers to spoof the appearance of the URL bar via homographic sequences...
Google Chrome < 6.0.472.53 Multiple Vulnerabilities
Binary data 800892.prm...
Google Chrome < 6.0.472.53 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 6.0.472.53. It therefore is reportedly affected by multiple vulnerabilities : - It is possible to bypass the pop-up blocker with a blank frame target . Issue 34414 - It is possible to visually spoof the URL bar with...
CVE-2010-2106
Unspecified vulnerability in Google Chrome before 5.0.375.55 might allow remote attackers to spoof the URL bar via vectors involving unload event handlers...
CVE-2010-2106
Unspecified vulnerability in Google Chrome before 5.0.375.55 might allow remote attackers to spoof the URL bar via vectors involving unload event handlers...
Code injection
Unspecified vulnerability in Google Chrome before 5.0.375.55 might allow remote attackers to spoof the URL bar via vectors involving unload event handlers...
CVE-2010-2106
Unspecified vulnerability in Google Chrome before 5.0.375.55 might allow remote attackers to spoof the URL bar via vectors involving unload event handlers...
CVE-2010-2106
Unspecified vulnerability in Google Chrome before 5.0.375.55 might allow remote attackers to spoof the URL bar via vectors involving unload event handlers...
CVE-2010-2106: Undefined Security Weakness
Unspecified vulnerability in Google Chrome before 5.0.375.55 might allow remote attackers to spoof the URL bar via vectors involving unload event handlers...
Google Patches 'High Risk' Chrome Flaws
Google has pushed out another automatic Chrome browser update to fix multiple security issues that could expose users to hacker attacks. Google Chrome 5.0.375.55, available for Windows, Mac and Linux, addresses at least two “high risk” vulnerabilities and several security-related denial-of-servic...
firefox: URL bar spoofing vulnerability
Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the address bar, and possibly conduct phishing attacks, via a crafted web page that calls window.open with an invalid character in the URL, makes document.write calls to the resulting object, and then calls th...
firefox: URL bar spoofing vulnerability
Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the address bar, and possibly conduct phishing attacks, via a crafted web page that calls window.open with an invalid character in the URL, makes document.write calls to the resulting object, and then calls th...