Heap buffer overflow in HTML5 canvas can be used to execute arbitrary code – Opera Security Advisories

Heap buffer overflow in HTML5 canvas can be used to execute arbitrary code – Opera Security Advisories OPCOM Team | August 12, 2010 Severity High Description Performing some painting operations on a canvas while certain transformations are being applied in Opera may result in heap buffer overflow...

opera -- multiple vulnerabilities

The Opera Destkop Team reports: Fixed an issue where heap buffer overflow in HTML5 canvas could be used to execute arbitrary code, as reported by Kuzzcc. Fixed an issue where unexpected changes in tab focus could be used to run programs from the Internet, as reported by Jakob Balle and Sven Krewi...

Heap buffer overflow in HTML5 canvas can be used to execute arbitrary code

Performing some painting operations on a canvas while certain transformations are being applied in Opera may result in heap buffer overflows. In most cases Opera will just freeze or terminate, but in some cases this could lead to a crash which could be used to execute code. To inject code,...

Immunity Canvas: MS10_048

Name| ms10048 ---|--- CVE| CVE-2010-1897 Exploit Pack| CANVAS Description| ms10048 Notes| CVE Name: CVE-2010-1897 VENDOR: Microsoft Notes: Reliably exploits Windows XP through Windows 7 32-bit. When executed, this will get a callback that runs as Local/SYSTEM. This also exploits Windows 7 x64...

Immunity Canvas: CF_DIRECTORY_TRAVERSAL

Name| CFdirectorytraversal ---|--- CVE| CVE-2010-2861 Exploit Pack| CANVAS Description| ColdFusion Directory Traversal Notes| CVE Name: CVE-2010-2861 VENDOR: http://www.adobe.com Things to consider: 1 - A remote file i-test10-1.cfm will be left in the webroot as well as the CANVAS callback trojan...

Immunity Canvas: MS10_059

Name| ms10059 ---|--- CVE| CVE-2010-2554 Exploit Pack| CANVAS Description| ms10059 Notes| References: http://www.microsoft.com/technet/security/bulletin/MS10-059.mspx CVE Name: CVE-2010-2554 VENDOR: Microsoft Notes: This exploit gain SYSTEM from NETWORKSERVICE or DefaultAppPool user by duplicatin...

Arbitrary file deletion

Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly implement read restrictions for CANVAS elements, which allows remote attackers to obtain sensitive cross-origin information via vectors involving reference retention and node deletion...

CVE-2010-1207

Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly implement read restrictions for CANVAS elements, which allows remote attackers to obtain sensitive cross-origin information via vectors involving reference retention and node deletion...

CVE-2010-2900

Google Chrome before 5.0.375.125 does not properly handle a large canvas, which has unspecified impact and remote attack vectors...

Design/Logic Flaw

Google Chrome before 5.0.375.125 does not properly handle a large canvas, which has unspecified impact and remote attack vectors...

CVE-2010-2900

CVE-2010-2900 concerns Google Chrome prior to 5.0.375.125, which does not properly handle a large canvas. The connected records identify Chrome as the affected product and list CVE-2010-2900 among WebKit/Chrome vulnerabilities in 2010-2011 public advisories (e.g., USN-1195-1, OpenVAS entries). Th...

CVE-2010-2900

Removed by vendor...

CVE-2010-2900

Google Chrome before 5.0.375.125 does not properly handle a large canvas, which has unspecified impact and remote attack vectors...

CVE-2010-2900

Google Chrome before 5.0.375.125 does not properly handle a large canvas, which has unspecified impact and remote attack vectors...

UBUNTU-CVE-2010-2900

Google Chrome before 5.0.375.125 does not properly handle a large canvas, which has unspecified impact and remote attack vectors...

Mozilla Firefox <canvas>元素跨域信息泄露漏洞

BUGTRAQ ID: 41878 CVE ID: CVE-2010-1207 Firefox是一款流行的开源WEB浏览器。 攻击者可以利用canvas元素破坏同源策略读取其他站点的数据。尽管对canvas元素设置了读限制，但可通过保持对元素上下文的引用并从DOM删除相关的canvas节点绕过上述限制。 Mozilla Firefox 3.6.x Mozilla Thunderbird 3.1.x 厂商补丁： Mozilla ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mozilla.org/ RedHat ------...

Mozilla Products Multiple Vulnerabilitie jul-10 (Windows)

The host is installed with Mozilla Firefox/Thunderbird that are prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvulnwin02jul10.nasl 6444 2017-06-27 11:24:02Z santu $ Mozilla Products Multiple Vulnerabilitie jul-10 Windows Authors: Antu Sanadi Copyright:...

Mozilla Foundation Security Advisory 2010-43

Mozilla Foundation Security Advisory 2010-43 Title: Same-origin bypass using canvas context Impact: High Announced: July 20, 2010 Reporter: Vladimir Vukicevic Products: Firefox, Thunderbird Fixed in: Firefox 3.6.7 Thunderbird 3.1.1 Description Mozilla developer Vladimir Vukicevic reported that a...

CVE-2010-1207

Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly implement read restrictions for CANVAS elements, which allows remote attackers to obtain sensitive cross-origin information via vectors involving reference retention and node deletion...

Immunity Canvas: WINDOWS_SHELL_LNK

Name| windowsshelllnk ---|--- CVE| CVE-2010-2568 Exploit Pack| CANVAS Description| windowsshelllnk Notes| CVE Name: CVE-2010-2568 VENDOR: Microsoft Notes: VersionsAffected: Windows XP, Windows 2003, Windows Vista, Windows 2008, Windows 7 Repeatability: Infinite References:...