Apache APR -- DoS vulnerabilities

The Apache Portable Runtime Project reports: A flaw was discovered in the aprfnmatch function in the Apache Portable Runtime APR library 1.4.4 or any backported versions that contained the upstream fix for CVE-2011-0419. This could cause httpd workers to enter a hung state 100% CPU utilization...

#Anonymous attacks Iranian state websites

Anonymous attacks Iranian state websites The infamous Anonymous hacking group has crippled a string of Iranian state websites including those of the Office of the Supreme Leader, state police and the Islamic Revolutionary Guards in attacks launched yesterday. The coordinated Distributed Denial of...

Google Chrome Multiple Vulnerabilities - March 11(Windows)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultdosvulnmar11win.nasl 7052 2017-09-04 11:50:51Z teissa $ Google Chrome Multiple Denial of Service Vulnerabilities - March 11Windows Authors: Madhuri D Copyright: Copyright ...

CVE-2011-1190

The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...

Design/Logic Flaw

The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...

CVE-2011-1190

The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...

UBUNTU-CVE-2011-1190

The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...

CVE-2011-1190

The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...

CVE-2011-1190

CVE-2011-1190 involves the Web Workers cross-origin issue in Chrome before 10.0.648.127. The vulnerability allowed remote attackers to bypass the Same Origin Policy via an error-message leak, potentially exposing partial data to other origins. Affected software: Google Chrome/Chromium WebKit impl...

CVE-2011-1190

Removed by vendor...

CVE-2011-1190: Exposure of Sensitive Information to an Unauthorized Actor

The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...

Debian DSA-2187-1 : icedove - several vulnerabilities

Several vulnerabilities have been discovered in Icedove, an unbranded version of the Thunderbird mail/news client. - CVE-2010-1585 Roberto Suggi Liverani discovered that the sanitising performed by ParanoidFragmentSink was incomplete. - CVE-2011-0051 Zach Hoffmann discovered that incorrect parsin...

Debian DSA-2186-1 : iceweasel - several vulnerabilities

Several vulnerabilities have been discovered in Iceweasel, a web browser based on Firefox. The included XULRunner library provides rendering services for several other applications included in Debian. - CVE-2010-1585 Roberto Suggi Liverani discovered that the sanitising performed by...

PT-2011-2932

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 10.0.648.127 Description The issue allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak" in the Web Workers implementation. Recommendations For...

[SECURITY] [DSA 2186-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2186-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 09, 2011 http://www.debian.org/security/faq -...

Mozilla Foundation Security Advisory 2011-06

Mozilla Foundation Security Advisory 2011-06 Title: Use-after-free error using Web Workers Impact: Critical Announced: March 1, 2011 Reporter: Daniel Kozlowski Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.14 Firefox 3.5.17 SeaMonkey 2.0.12 Description Daniel Kozlowski reported that a...

DSA-2180-1 iceape - several

Bulletin has no description...

CVE-2011-0057

Use-after-free vulnerability in the Web Workers implementation in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to execute arbitrary code via vectors related to a JavaScript Worker and garbage collection...

Design/Logic Flaw

Use-after-free vulnerability in the Web Workers implementation in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to execute arbitrary code via vectors related to a JavaScript Worker and garbage collection...

CVE-2011-0057

CVE-2011-0057 is a use-after-free vulnerability in the Web Workers implementation of Mozilla Firefox. Affected products and versions: Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12. The issue arises from a use-after-free in interactions between a JavaScript Worker and ...