idev Game Site CMS v1.0 - Multiple Web Vulnerabilities

Document Title: =============== idev Game Site CMS v1.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=494 Release Date: ============= 2012-04-07 Vulnerability Laboratory ID VL-ID: ==================================== 494...

FreeBSD : chromium -- multiple vulnerabilities (057130e6-7f61-11e1-8a43-00262d5ed8ee)

Google Chrome Releases reports : 106577 Medium CVE-2011-3066: Out-of-bounds read in Skia clipping. Credit to miaubiz. 117583 Medium CVE-2011-3067: Cross-origin iframe replacement. Credit to Sergey Glazunov. 117698 High CVE-2011-3068: Use-after-free in run-in handling. Credit to miaubiz. 117728 Hi...

CVE-2011-3067

Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements...

CVE-2011-3067

Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements...

CVE-2011-3067

Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements...

CVE-2011-3067

Removed by vendor...

PT-2012-1628

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 18.0.1025.151 Description The issue allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements. Recommendations For versions prior to 18.0.1025.151, update to...

CVE-2011-3067

Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements...

CVE-2011-3067: Origin Validation Error

Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements...

Stable and Beta Channel Updates

The Chrome Stable and Beta channels have been updated to 18.0.1025.151 on Windows, Mac, Linux and Chrome Frame. This release fixes issues including: black screen on Hybrid Graphics system with GPU accelerated compositing enabled Issue: 117371 CSS not applied to element Issue: 114667 Regression...

CVE-2011-3056

Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."...

CVE-2011-3056

Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."...

CVE-2011-3056

Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."...

CVE-2011-3056

Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."...

CVE-2011-3056

CVE-2011-3056 affects Google Chrome prior to 17.0.963.83, where a cross-origin policy bypass is possible via a vector involving a “magic iframe.” The underlying issue is a Same Origin Policy bypass in the browser’s handling of iframes, enabling partial confidentiality/integrity exposure. The publ...

CVE-2011-3056

Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."...

CVE-2011-3056

Removed by vendor...

CVE-2011-3056: Origin Validation Error

Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."...

PT-2012-1617

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 17.0.963.83 Description The issue allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe". This could potentially lead to unauthorized access to sensitive information...

Safari for windows 64 iframe Blue Screen Of Death (BSoD)

iframe 标签 64位的Win7系统崩溃的标签，它将导致 Win7 发生著名的蓝屏错误 Blue Screen Of Death BSoD. 该漏洞在64位的Win7下的Safari 浏览器测试 该漏洞是由于 win32k.sys 的一个错误导致内存的崩溃，当页面上包含一个 iframe，其 height 属性是个非常大的值时该错误就会发生。 目前该漏洞仅存在于64位的win7系统 0 Safari for windows 64 目前尚无有效方案 iframe height='18082563'/iframe...