WebKit 'FrameLoader::checkCompleted()'函数释放后重用远程代码执行漏洞

BUGTRAQ ID: 59515 CVECAN ID: CVE-2013-0902 WebKit是一个开源的浏览器引擎，也是苹果Mac OS X 系统引擎框架版本的名称，主要用于Safari，Dashboard，Mail和其他一些Mac OS X 程序。 WebKit 1.11.5、1.10.2在 readystatechange 事件中删除子帧时，函数 'FrameLoader::checkCompleted' WebCore/loader/FrameLoader.cpp存在释放后重用错误，通过特制的网页，上下文独立的攻击者可间接引用已经释放的内存并可能执行任意代码。 0 WebKi...

Google Chrome Multiple Vulnerabilities-02 March 2013 (Linux)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvuln02mar13lin.nasl 6079 2017-05-08 09:03:33Z teissa $ Google Chrome Multiple Vulnerabilities-02 March 2013 Linux Authors: Thanga Prakash S Copyright: Copyright c...

Google Chrome Multiple Vulnerabilities-02 March 2013 (Windows)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvuln02mar13win.nasl 6074 2017-05-05 09:03:14Z teissa $ Google Chrome Multiple Vulnerabilities-02 March 2013 Windows Authors: Thanga Prakash S Copyright: Copyright ...

FreeBSD : chromium -- multiple vulnerabilities (40d5ab37-85f2-11e2-b528-00262d5ed8ee)

Google Chrome Releases reports : 176882 High CVE-2013-0902: Use-after-free in frame loader. Credit to Chamal de Silva. 176252 High CVE-2013-0903: Use-after-free in browser navigation handling. Credit to 'chromium.khalil'. 172926 172331 High CVE-2013-0904: Memory corruption in Web Audio. Credit to...

Google Chrome < 25.0.1364.152 Multiple Vulnerabilities

Binary data 800923.prm...

Google Chrome < 25.0.1364.152 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is a version prior to 25.0.1364.152. It is, therefore, affected by the following vulnerabilities : - Use-after-free errors exist related to the frame loader, browser navigation handling and SVG animation. CVE-2013-0902, CVE-2013-0903,...

CVE-2013-0902

CVE-2013-0902 is a use-after-free vulnerability in the frame-loader of Google Chrome, reported for versions before 25.0.1364.152. The affected component is FrameLoader.cpp (FrameLoader::checkCompleted); impact is denial of service with remote exploitation potential and possibly other unspecified ...