CVE-2013-2903

Use-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html/HTMLMediaElement.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving moving...

CVE-2013-2902

CVE-2013-2902: Use-after-free in Blink's XSLT ProcessingInstruction handling during applyXSLTransform (HTML document or xsl:processing-instruction) may allow remote denial of service or other impact. Affected product: Google Chrome/Blink prior to 29.0.1547.57. Root cause: use-after-free in XSLT p...

CVE-2013-2904

CVE-2013-2904 refers to a use-after-free in XML document parsing within Chromium/Blink (Document::finishedParsing) that could enable a denial of service via an onload handler altering an IFRAME src. The vulnerability was disclosed in the Chrome/Chromium context and is listed among multiple CVEs a...

CVE-2013-2902

Use-after-free vulnerability in the XSLT ProcessingInstruction implementation in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to an applyXSLTransform call involving 1 an HTML...

CVE-2013-2903

Removed by vendor...

CVE-2013-2904

Use-after-free vulnerability in the Document::finishedParsing function in core/dom/Document.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via an onload event that changes an IFRAME element...

CVE-2013-2904

Removed by vendor...

CVE-2013-2903

CVE-2013-2903 is a use-after-free in Blink’s HTMLMediaElement::didMoveToNewDocument. Affected software: Google Chrome (Blink) prior to 29.0.1547.57. Impact stated: remote attackers could cause a denial of service or other unspecified effects by moving audio/video elements between documents. Publi...

CVE-2013-2875

core/rendering/svg/SVGInlineTextBox.cpp in the SVG implementation in Blink, as used in Google Chrome before 28.0.1500.71, allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2013-2875

Removed by vendor...

CVE-2010-5155

Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

Race condition

Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

CVE-2010-5155

CVE-2010-5155 concerns a race condition in Blink Professional 4.6.1 on Windows XP that allows local users to bypass kernel‑mode hook handlers by making certain user‑space memory changes during hook‑handler execution (an argument-switch or KHOBE attack). The vulnerability can enable execution of c...

CVE-2010-5155

Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...

PT-2012-1367 · Blink · Blink Professional

Name of the Vulnerable Software and Affected Versions: Blink Professional version 4.6.1 Description: A race condition in Blink Professional on Windows XP allows local users to bypass kernel-mode hook handlers and execute dangerous code that would otherwise be blocked by a handler but not blocked ...

Webkit (Apple Safari 4.0.5) - Blink Tag Stack Exhaustion Denial of Service

Webkit Apple Safari 4.0.5 - Blink Tag Stack Exhaustion Denial of Service loop1; var a = ""; function loop1 document.writea; setIntervalloop2,0; function loop2 document.writea; setIntervalloop1,0; Webkit Safari Stack Exhaustion DoS Found By: DrIDE Credit To: Mattias Karlsson Reference:...

Webkit (Apple Safari 4.0.5) - Blink Tag Stack Exhaustion Denial of Service

loop1; var a = ""; function loop1 document.writea; setIntervalloop2,0; function loop2 document.writea; setIntervalloop1,0; Webkit Safari Stack Exhaustion DoS Found By: DrIDE Credit To: Mattias Karlsson Reference: http://www.exploit-db.com/exploits/12401 Tested On: Windows 7 + Safari 4.0.5...

Apple Webkit Blink Event Dangling Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable software utilizing Apple's WebKit library. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists due to a failure to unregister a callba...

Blink Blog SQL Injection

Salvatore "drosophila" Fresta + Application: Blink Blog System + Version: Unknown + Website: http://blogink.sourceforge.net + Bugs: A Authentication Bypass + Exploitation: Remote + Date: 03 Aug 2009 + Discovered by: Salvatore Fresta aka drosophila + Author: Salvatore Fresta aka drosophila + E-mai...

Blink Blog System (Auth Bypass) SQL Injection Vulnerability

No description provided by source. Salvatore "drosophila" Fresta + Application: Blink Blog System + Version: Unknown + Website: http://blogink.sourceforge.net + Bugs: A Authentication Bypass + Exploitation: Remote + Date: 03 Aug 2009 + Discovered by: Salvatore Fresta aka drosophila + Author:...