Mozilla Same-origin bypass using canvas context

Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly implement read restrictions for CANVAS elements, which allows remote attackers to obtain sensitive cross-origin information via vectors involving reference retention and node deletion...

Same-origin bypass using canvas context — Mozilla

Mozilla developer Vladimir Vukicevic reported that a canvas element can be used to read data from another site, violating the same-origin policy. The read restriction placed on a canvas element which has had cross-origin data rendered into it can be bypassed by retaining a reference to the canvas...

Opera - Canvas Element (Denial of Service)

Opera - Canvas Element Denial of Service Opera.html function Opera canvas = document.getElementById"canvas"; ctx = canvas.getContext"2d"; ctx.getImageData0,0,0x20000,0x20000; Original Advisory: http://pouya.info/blog/userfiles/vul/OperaCC.pdf...

Opera Crash by <canvas> Element

Opera 是独一无二的网络浏览器, 功能强大，使您上网更高效、更安全、更极速 Opera浏览器 canvas Element存在安全问题。 Opera 10.6 and lower update software html body onload="Opera" script language=JavaScript function Opera canvas = document.getElementById"canvas"; ctx = canvas.getContext"2d"; ctx.getImageData0,0,0x20000,0x20000; /script canvas...

Opera Denial of Service by <canvas> Element

Exploit for windows platform in category dos / poc =========================================== Opera Denial of Service by Element =========================================== Opera.html function Opera canvas = document.getElementById"canvas"; ctx = canvas.getContext"2d";...

Opera - Canvas Element (Denial of Service)

Opera.html function Opera canvas = document.getElementById"canvas"; ctx = canvas.getContext"2d"; ctx.getImageData0,0,0x20000,0x20000; Original Advisory: http://pouya.info/blog/userfiles/vul/OperaCC.pdf...

openSUSE Security Update : acroread (openSUSE-SU-2010:0359-1)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-1297, CVE-2010-1240, CVE-2010-1285, CVE-2010-1295, CVE-2010-2168, CVE-2010-2201, CVE-2010-2202, CVE-2010-2203, CVE-2010-2204, CVE-2010-2205, CVE-2010-2206, CVE-2010-2207, CVE-2010-2208,...

Immunity Canvas: EVOCAM

Name| evocam ---|--- CVE| CVE-2010-2309 Exploit Pack| CANVAS Description| EVOCAM Notes| CVSS: 7.5 Repeatability: One shot VENDOR: Evologic CVE Url: https://vulners.com/cve/CVE-2010-2309 CVE Name: CVE-2010-2309...

Immunity Canvas: IE_HCP

Name| iehcp ---|--- CVE| CVE-2010-1885 Exploit Pack| CANVAS Description| iehcp Notes| CVE Name: CVE-2010-1885 VENDOR: Microsoft Notes: http://www.microsoft.com/technet/security/Bulletin/MS10-042.mspx Repeatability: Infinite MSADV: MS10-042 Date public: 06/09/2010 CVE Url:...

CVE-2010-1416

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly restrict the reading of a canvas that contains an SVG image pattern from a different web site, which allows remote attackers to read images from other sites via a crafte...

CVE-2010-1416

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly restrict the reading of a canvas that contains an SVG image pattern from a different web site, which allows remote attackers to read images from other sites via a crafte...

CVE-2010-1416

Removed by vendor...

Immunity Canvas: MS10_032

Name| ms10032 ---|--- CVE| CVE-2010-0485 Exploit Pack| CANVAS Description| ms10032 Notes| CVE Name: CVE-2010-0485 VENDOR: Microsoft Notes: This is a local kernel vulnerability for XP, 2003, and Vista. It will only work on 32 bit platform. The binary will not trigger the bug if running on a 64 bit...

Immunity Canvas: FLASH_NEWFUNCTION

Name| flashnewfunction ---|--- CVE| CVE-2010-1297 Exploit Pack| CANVAS Description| Adobe Acrobat Flash Invalid newfunction call Notes| CVE Name: CVE-2010-1297 VENDOR: Adobe NOTES: Exploitation through an PDF file is more reliable than with a direct HTML/Flash exploit VersionsAffected: Acrobat 9....

Safari 4.0.5 and Internet Explorer 6.0 / 8.0 Denial of Service

Exploit for windows platform in category dos / poc ============================================================== Safari 4.0.5 and Internet Explorer 6.0 / 8.0 Denial of Service ============================================================== "; while 1 echo ""; echo ""; echo ""; ? 0day.today...

Canvas Tag Denial Of Service

"; while 1 echo ""; echo ""; echo ""; ?...

Canvas tag DoS - Multiple Browsers

Exploit for multiple platform in category dos / poc ================================== Canvas tag DoS - Multiple Browsers ================================== "; while 1 echo ""; echo ""; echo ""; ? 0day.today 2018-04-11...

Immunity Canvas: MS10_026

Name| ms10026 ---|--- CVE| CVE-2010-0480 Exploit Pack| CANVAS Description| MPEG Layer-3 codecs stack overflow Notes| CVE Name: CVE-2010-0480 VENDOR: Microsoft MSADV: MS10-026 Repeatability: One Shot MSRC: http://www.microsoft.com/technet/security/Bulletin/MS10-026.mspx Note: This is a client-side...

MS10-022: Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (981169)

The installed version of the VBScript Scripting Engine allows an attacker to specify a Help file location when displaying a dialog box on a web page. If a user can be tricked into pressing the F1 key while such a dialog box is being displayed, an attacker can leverage this to cause the Windows He...

Immunity Canvas: JAVA_METHOD_CHAIN

Name| javamethodchain ---|--- CVE| CVE-2010-0840 Exploit Pack| CANVAS Description| javamethodchain Notes| CVE Name: CVE-2010-0840 VENDOR: Sun Repeatability: Infinite client side - no crash References:...