9955 matches found
firefox: cross-domain information disclosure
Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which...
Mozilla Cross-origin data leakage from script filename in error messages
dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a script's URL in certain circumstances involving a redirect and an error message, which allows...
Same-origin bypass using canvas context — Mozilla
Mozilla developer Vladimir Vukicevic reported that a canvas element can be used to read data from another site, violating the same-origin policy. The read restriction placed on a canvas element which has had cross-origin data rendered into it can be bypassed by retaining a reference to the canvas...
Cross-origin data leakage from script filename in error messages — Mozilla
Security researcher Soroush Dalili reported that potentially sensitive URL parameters could be leaked across domains upon script errors when the script filename and line number is included in the error message...
mozilla -- multiple vulnerabilities
The Mozilla Project reports: MFSA 2010-34 Miscellaneous memory safety hazards rv:1.9.2.7/ 1.9.1.11 MFSA 2010-35 DOM attribute cloning remote code execution vulnerability MFSA 2010-36 Use-after-free error in NodeIterator MFSA 2010-37 Plugin parameter EnsureCachedAttrParamArrays remote code executi...
openSUSE Security Update : opera (openSUSE-SU-2010:0368-1)
Opera was upgraded to the 10.60 release. It brings lots of new features, bugfixes and security fixes. Security fixes include: CVE-2010-0653: Opera permits cross-origin loading of CSS style sheets even when the style sheet download has an incorrect MIME type and the style sheet document is...
openSUSE Security Update : opera (openSUSE-SU-2010:0368-1)
Opera was upgraded to the 10.60 release. It brings lots of new features, bugfixes and security fixes. Security fixes include: CVE-2010-0653: Opera permits cross-origin loading of CSS style sheets even when the style sheet download has an incorrect MIME type and the style sheet document is...
Google Chrome GURL Cross Origin Bypass (CVE-2010-1663)
Google Chrome is a web browser developed by Google Inc. It provides a rich web browsing experience similar to other web browsers such as Firefox, Opera, and Internet Explorer. Google Chrome web browser contains a cross origin bypass vulnerability. The vulnerability is due to insufficient validati...
Google Chrome < 5.0.375.70 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 5.0.375.70. As such, it is reportedly affected by multiple vulnerabilities : - A cross-origin keystroke redirection vulnerability. Issue 15766 - A cross-origin bypass in DOM methods. Issue 39985 - A memory error exists in...
Google Chrome < 5.0.375.70 Multiple Vulnerabilities
Binary data 5567.pasl...
Google Chrome < 5.0.375.70 Multiple Vulnerabilities
Binary data 800928.prm...
Google Chrome 4.1.249.1059 Cross Origin Bypass in Google URL (GURL)
No description provided by source. Google Chrome 4.1.249.1059 Cross Origin Bypass in Google URL GURL CVE-ID: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1663 Author: Jordi Chancel Software Link: http://googlechromereleases.blogspot.com/2010/04/stable-update-bug-and-security-fixes.html...
Google Chrome 4.1.249.1059 Cross Origin Bypass
Google Chrome 4.1.249.1059 Cross Origin Bypass in Google URL GURL CVE-ID: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1663 Author: Jordi Chancel Software Link: http://googlechromereleases.blogspot.com/2010/04/stable-update-bug-and-security-fixes.html Description: The Google URL Parsing...
Google Chrome 4.1.249.1059 - Cross Origin Bypass in Google URL (GURL)
Google Chrome 4.1.249.1059 - Cross Origin Bypass in Google URL GURL Google Chrome 4.1.249.1059 Cross Origin Bypass in Google URL GURL CVE-ID: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1663 Author: Jordi Chancel Software Link:...
Google Chrome 4.1.249.1059 Cross Origin Bypass in Google URL (GURL)
Exploit for windows platform in category remote exploits =================================================================== Google Chrome 4.1.249.1059 Cross Origin Bypass in Google URL GURL =================================================================== Google Chrome 4.1.249.1059 Cross Origi...
Google Chrome 4.1.249.1059 - Cross Origin Bypass in Google URL (GURL)
Google Chrome 4.1.249.1059 Cross Origin Bypass in Google URL GURL CVE-ID: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1663 Author: Jordi Chancel Software Link: http://googlechromereleases.blogspot.com/2010/04/stable-update-bug-and-security-fixes.html Description: The Google URL Parsing...
Google Fixes Three Critical Flaws in Chrome
Google has released a new version of its Chrome browser, fixing three serious security vulnerabilities in earlier versions of the browser. Google released version 4.1.249.1064 for Windows on Tuesday, fixing the three security flaws, for which it paid $1500 through its bug bounty program. Two of t...
Google Chrome < 4.1.249.1064 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 4.1.249.1064. Such versions are reportedly affected by multiple vulnerabilities : - A cross-origin bypass in Google URL GURL. Issue 40445 - An HTML5 media handling issue could lead to memory corruption. Issue 40487 - A font...
Google Chrome Multiple Vulnerabilities (win)
This host is installed with Google Chrome Web Browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnapr10.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome Multiple Vulnerabilities win Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...
Mozilla Products Multiple Vulnerabilities Mar-10 (Windows)
The host is installed with Mozilla Firefox/Seamonkey/Thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmozillaprdtsmultvulnmar10win.nasl 6444 2017-06-27 11:24:02Z santu $ Mozilla Products Multiple Vulnerabilities Mar-10 Windows Authors: Antu Sanadi...