CVE-2010-5072: Undefined Security Weakness

The JavaScript implementation in Opera 10.5 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method...

CVE-2010-5071: Undefined Security Weakness

The JavaScript implementation in Microsoft Internet Explorer 8.0 and earlier does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method...

CVE-2010-5073: Undefined Security Weakness

The JavaScript implementation in Google Chrome 4 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method. NOTE: this may overlap...

PT-2011-1258

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 4.0 Thunderbird versions prior to 3.3 SeaMonkey versions prior to 2.1 Description The issue is related to the JavaScript implementation, which does not properly restrict the set of values contained in the obje...

PT-2011-2002

Name of the Vulnerable Software and Affected Versions Opera version 10.5 Description The issue concerns the JavaScript implementation in Opera, which does not properly restrict the set of values contained in the object returned by the getComputedStyle method. This allows remote attackers to obtai...

PT-2011-2001

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 8.0 and earlier Description The issue concerns the JavaScript implementation, which does not properly restrict the set of values contained in the object returned by the getComputedStyle method. This allows...

PT-2011-2003

Name of the Vulnerable Software and Affected Versions Google Chrome version 4 Description The JavaScript implementation in Google Chrome does not properly restrict the set of values contained in the object returned by the getComputedStyle method. This allows remote attackers to obtain sensitive...

Google Chrome 'WebKit' CSS Implementation DoS Vulnerability (Windows)

The host is installed Google Chrome and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromecssimpdosvulnwin.nasl 7015 2017-08-28 11:51:24Z teissa $ Google Chrome 'WebKit' CSS Implementation DoS Vulnerability Windows Authors: Madhuri D Copyright: Copyright c...

UBUNTU-CVE-2011-1691

The counterToCSSValue function in CSSComputedStyleDeclaration.cpp in the Cascading Style Sheets CSS implementation in WebCore in WebKit before r82222, as used in Google Chrome before 11.0.696.43 and other products, does not properly handle access to the 1 counterIncrement and 2 counterReset...

CVE-2011-1691

Removed by vendor...

Cross-domain data theft using CSS — Mozilla

Google security researcher Chris Evans reported that data can be read across domains by injecting bogus CSS selectors into a target site and then retrieving the data using JavaScript APIs. If an attacker can inject opening and closing portions of a CSS selector into points A and B of a target pag...