15330 matches found
CVE-2012-2860
Removed by vendor...
CVE-2012-2857
Removed by vendor...
CVE-2012-2854
Removed by vendor...
CVE-2012-2848
Removed by vendor...
CVE-2012-2847
Removed by vendor...
CVE-2012-2856
Removed by vendor...
CVE-2012-2855
Removed by vendor...
CVE-2012-2849
Removed by vendor...
CVE-2012-2849: Undefined Security Weakness
Off-by-one error in the GIF decoder in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to cause a denial of service out-of-bounds read via a crafted image...
PT-2012-5190
Name of the Vulnerable Software and Affected Versions Opera versions prior to 12.01 on Windows and UNIX Opera versions prior to 11.66 and 12.x prior to 12.01 on Mac OS X Description The issue is related to a low severity problem with unspecified details about its impact and attack vectors...
CVE-2012-2852: Undefined Security Weakness
The PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does not properly handle object linkage, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a...
CVE-2012-2855: Undefined Security Weakness
Use-after-free vulnerability in the PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document...
CVE-2012-4144: Improper Neutralization of Input During Web Page Generation
Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, does not properly escape characters in DOM elements, which makes it easier for remote attackers to bypass cross-site scripting XSS protection mechanisms via a crafted HTML document...
CVE-2012-2848: Undefined Security Weakness
The drag-and-drop implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows user-assisted remote attackers to bypass intended file access restrictions via a crafted web site...
CVE-2012-4143: Improper Control of Generation of Code
Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window for the download dialog, a different vulnerability than CVE-2012-1924...
CVE-2012-2860: Undefined Security Weakness
The date-picker implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site...
CVE-2012-2851: Undefined Security Weakness
Multiple integer overflows in the PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document...
CVE-2012-2847: Undefined Security Weakness
Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does not request user confirmation before continuing a large series of downloads, which allows user-assisted remote attackers to cause a denial of service resource consumption via a craft...
CVE-2012-2857: Undefined Security Weakness
Use-after-free vulnerability in the Cascading Style Sheets CSS DOM implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a...
CVE-2012-4142: Improper Neutralization of Input During Web Page Generation
Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, ignores some characters in HTML documents in unspecified circumstances, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via a crafted document...