PT-2016-2141

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.79 Opera versions prior to 51.0.2704.79 Description The issue is related to the FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, which does not prevent frame...

CVE-2016-1675

Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy by leveraging the mishandling of Document reattachment during destruction, related to FrameLoader.cpp and LocalFrame.cpp...

Design/Logic Flaw

The DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame-attach operations from occurring during or after frame-detach operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, related to FrameLoader.cpp,...

CVE-2016-1623

The DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame-attach operations from occurring during or after frame-detach operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, related to FrameLoader.cpp,...

CVE-2013-6636

The FrameLoader::notifyIfInitialDocumentAccessed function in core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 31.0.1650.63, makes an incorrect check for an empty document during presentation of a modal dialog, which allows remote attackers to spoof the address bar via vectors...

CVE-2013-6636

The FrameLoader::notifyIfInitialDocumentAccessed function in core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 31.0.1650.63, makes an incorrect check for an empty document during presentation of a modal dialog, which allows remote attackers to spoof the address bar via vectors...

CVE-2013-6636

The FrameLoader::notifyIfInitialDocumentAccessed function in core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 31.0.1650.63, makes an incorrect check for an empty document during presentation of a modal dialog, which allows remote attackers to spoof the address bar via vectors...

CVE-2013-6636

CVE-2013-6636 affects Chromium/Chromium-browser up to version 31.0.1650.63. The issue arises from a faulty empty-document check in the Blink FrameLoader path during modal dialog presentation, enabling an address bar spoofing attack via document.write. Affected component: FrameLoader.cpp in Blink ...

CVE-2013-6636: Improper Input Validation

The FrameLoader::notifyIfInitialDocumentAccessed function in core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 31.0.1650.63, makes an incorrect check for an empty document during presentation of a modal dialog, which allows remote attackers to spoof the address bar via vectors...

CVE-2013-6636

Removed by vendor...

PT-2013-6063

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 31.0.1650.63 Description The issue arises from an incorrect check for an empty document during the presentation of a modal dialog in the FrameLoader::notifyIfInitialDocumentAccessed function. This allows remote...

WebKit 'FrameLoader::checkCompleted()'函数释放后重用远程代码执行漏洞

BUGTRAQ ID: 59515 CVECAN ID: CVE-2013-0902 WebKit是一个开源的浏览器引擎，也是苹果Mac OS X 系统引擎框架版本的名称，主要用于Safari，Dashboard，Mail和其他一些Mac OS X 程序。 WebKit 1.11.5、1.10.2在 readystatechange 事件中删除子帧时，函数 'FrameLoader::checkCompleted' WebCore/loader/FrameLoader.cpp存在释放后重用错误，通过特制的网页，上下文独立的攻击者可间接引用已经释放的内存并可能执行任意代码。 0 WebKi...