CVE-2009-2974: Undefined Security Weakness

Google Chrome 1.0.154.65, 1.0.154.48, and earlier allows remote attackers to 1 cause a denial of service application hang via vectors involving a chromehtml: URI value for the document.location property or 2 cause a denial of service application hang and CPU consumption via vectors involving a...

CVE-2008-7103: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in an ActiveX control in najdisitoolbar.dll in Najdi.si Toolbar 2.0.4.1 allows remote attackers to cause a denial of service browser crash or execute arbitrary code via a long Document.Location property value...

CVE-2009-1412

Argument injection vulnerability in the chromehtml: protocol handler in Google Chrome before 1.0.154.59, when invoked by Internet Explorer, allows remote attackers to determine the existence of files, and open tabs for URLs that do not satisfy the IsWebSafeScheme restriction, via a web page that...

CVE-2009-1413

Google Chrome 1.0.x does not cancel timeouts upon a page transition, which makes it easier for attackers to conduct Universal XSS attacks by calling setTimeout to trigger future execution of JavaScript code, and then modifying document.location to arrange for JavaScript execution in the context o...

CVE-2007-5896

Mozilla Firefox 2.0.0.9 allows remote attackers to cause a denial of service CPU consumption and crash via an iframe with Javascript that sets the document.location to contain a leading NULL byte \x00 and a 1 res://, 2 about:config, or 3 file:/// URI...

Design/Logic Flaw

Apple Safari 3.0 and 3.0.1 on Windows XP SP2 allows attackers to cause a denial of service application crash via JavaScript that sets the document.location variable, as demonstrated by an empty value of document.location...

CVE-2007-3274: Undefined Security Weakness

Apple Safari 3.0 and 3.0.1 on Windows XP SP2 allows attackers to cause a denial of service application crash via JavaScript that sets the document.location variable, as demonstrated by an empty value of document.location...

CVE-2007-1256: Improper Restriction of Operations within the Bounds of a Memory Buffer

Mozilla Firefox 2.0.0.2 allows remote attackers to spoof the address bar, favicons, and document source, and perform updates in the context of arbitrary websites, by repeatedly setting document.location in the onunload attribute when linking to another website, a variant of CVE-2007-1092...

XSS flaw in MG2 Image Gallery (v.0.5.1)

Users can inject XSS into the form field "Name", when adding a comment on a picture. This will lead to the execution of XSS code. Simple scripting like scriptalert'hello'/script , and more advanced document.location, and document.cookie works. This has been tested on version 0.5.1. Other versions...