<iframe> element exposed across domains via name attribute — Mozilla

Vitaly Nevgen reported that an attacker could replace a sub-frame in another domain's document by using the name attribute of the sub-frame as a form submission target. This can potentially allow for phishing attacks against users and violates the HTML5 frame navigation policy...

Google Releases Chrome 16.0.912.77

Google has released Chrome 16.0.912.77 for Linux, Mac, Windows, and Chrome Frame to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT encourages users and administrators to review the Google Chro...

Stable Channel Update

The Stable channel has been updated to 16.0.912.77 for Windows, Mac, Linux and Chrome Frame Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix. $1000 106484...

kernel: b43: allocate receive buffers big enough for max frame len + offset

The dmarx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service system crash via a crafted frame...

Stable Channel Update

The Stable channel has been updated to 16.0.912.75 for Windows, Mac, Linux and Chrome Frame Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix $1000 106672...

Unfixed Frame Redirect vulnerability at deperiodistas.com

Security researcher p0pc0rn, has submitted on 24/12/2011 a Frame Redirect vulnerability affecting deperiodistas.com, which at the time of submission ranked 667889 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currently...

Unfixed Frame Redirect vulnerability at www.filmhill.com

Security researcher p0pc0rn, has submitted on 24/12/2011 a Frame Redirect vulnerability affecting www.filmhill.com, which at the time of submission ranked 700694 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is currently unfixe...

Unfixed Frame Redirect vulnerability at www.elebda3.net

Security researcher p0pc0rn, has submitted on 24/12/2011 a Frame Redirect vulnerability affecting www.elebda3.net, which at the time of submission ranked 60799 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currently unfixed...

Unfixed Frame Redirect vulnerability at www.teacherplanet.com

Security researcher p0pc0rn, has submitted on 24/12/2011 a Frame Redirect vulnerability affecting www.teacherplanet.com, which at the time of submission ranked 287229 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currently...

Unfixed Frame Redirect vulnerability at securityphresh.com

Security researcher Snypter Dhruv, has submitted on 23/12/2011 a Frame Redirect vulnerability affecting securityphresh.com, which at the time of submission ranked 1573986 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2011. It is current...

Microsoft Windows win32k.sys memory corruption

Integer overflow on the frame with large height...

Mozilla Products DOM Frame Denial of Service Vulnerability (MAC OS X)

The host is installed with Mozilla firefox/thunderbird and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodmozillaprdtsdomframedosvulnmacosx.nasl 7024 2017-08-30 11:51:43Z teissa $ Mozilla Products DOM Frame Denial of Service Vulnerability MAC OS X Authors:...

Mozilla Products DOM Frame Denial of Service Vulnerability - Mac OS X

Mozilla Firefox/Thunderbird is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unfixed Frame Redirect vulnerability at vyoms.com

Security researcher p0pc0rn, has submitted on 22/12/2011 a Frame Redirect vulnerability affecting vyoms.com, which at the time of submission ranked 60001 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/12/2011. It is currently unfixed. If yo...

CVE-2011-3664

Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not properly handle certain DOM frame deletions by plugins, which allows remote attackers to cause a denial of service incorrect pointer dereference and application crash or possibly have unspecified other...

CVE-2011-3664

Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not properly handle certain DOM frame deletions by plugins, which allows remote attackers to cause a denial of service incorrect pointer dereference and application crash or possibly have unspecified other...

CVE-2011-3664

Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not properly handle certain DOM frame deletions by plugins, which allows remote attackers to cause a denial of service incorrect pointer dereference and application crash or possibly have unspecified other...

Thunderbird 8.x Multiple Vulnerabilities (Mac OS X)

The installed version of Thunderbird 8.x is potentially affected by the following security issues : - An out-of-bounds memory access error exists in the 'SVG' implementation and can be triggered when 'SVG' elements are removed during a 'DOMAttrModified' event handler. CVE-2011-3658 - Various memo...

CVE-2011-3664: Undefined Security Weakness

Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not properly handle certain DOM frame deletions by plugins, which allows remote attackers to cause a denial of service incorrect pointer dereference and application crash or possibly have unspecified other...

Crash when plugin removes itself on Mac OS X — Mozilla

FireBreath developer Richard Bateman reported a crash on Mac OS X that occurred when a plugin deletes its containing DOM frame during a call from that frame. The observed symptom is a null dereference but we cannot rule out the possibility that content from a scriptable plugin such as Flash could...