20 matches found
EUVD-2013-2772
Malware in sbrugna...
EUVD-2013-2774
Malware in sbrugna...
EUVD-2013-2771
Malware in sbrugna...
CVE-2013-2832
The Buffer::Set function in core/cross/buffer.cc in the O3D plug-in in Google Chrome OS before 26.0.1410.57 does not prevent uninitialized data from remaining in a buffer, which might allow remote attackers to obtain sensitive information via unspecified vectors...
CVE-2013-2833
Use-after-free vulnerability in the O3D plug-in in Google Chrome OS before 26.0.1410.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper management of ownership relationships involving Elements and DrawElements...
Security feature bypass
Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability than CVE-2013-2834...
Security feature bypass
Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability than CVE-2013-2835...
Design/Logic Flaw
Use-after-free vulnerability in the O3D plug-in in Google Chrome OS before 26.0.1410.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper management of ownership relationships involving Elements and DrawElements...
CVE-2013-2832
CVE-2013-2832 affects Google Chrome OS before 26.0.1410.57, specifically the O3D plug-in’s Buffer::Set in core/cross/buffer.cc, where uninitialized data could remain in a buffer and allow remote attackers to obtain sensitive information via unspecified vectors. The fix was delivered in Chrome OS ...
CVE-2013-2832
The Buffer::Set function in core/cross/buffer.cc in the O3D plug-in in Google Chrome OS before 26.0.1410.57 does not prevent uninitialized data from remaining in a buffer, which might allow remote attackers to obtain sensitive information via unspecified vectors...
CVE-2013-2833
CVE-2013-2833 is a use-after-free vulnerability in the O3D plug-in used by Google Chrome OS before version 26.0.1410.57. The flaw arises from improper ownership relationship handling among Elements and DrawElements, enabling remote attackers to trigger a denial of service or potentially other imp...
CVE-2013-2833
Use-after-free vulnerability in the O3D plug-in in Google Chrome OS before 26.0.1410.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper management of ownership relationships involving Elements and DrawElements...
CVE-2013-2834: Undefined Security Weakness
Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability than CVE-2013-2835...
PT-2013-3954
Name of the Vulnerable Software and Affected Versions Google Chrome OS versions prior to 26.0.1410.57 Description The issue is related to the Buffer::Set function in the O3D plug-in, which does not prevent uninitialized data from remaining in a buffer. This could allow remote attackers to obtain...
CVE-2013-2832: Improper Restriction of Operations within the Bounds of a Memory Buffer
The Buffer::Set function in core/cross/buffer.cc in the O3D plug-in in Google Chrome OS before 26.0.1410.57 does not prevent uninitialized data from remaining in a buffer, which might allow remote attackers to obtain sensitive information via unspecified vectors...
PT-2013-3955
Name of the Vulnerable Software and Affected Versions Google Chrome OS versions prior to 26.0.1410.57 Description A use-after-free issue in the O3D plug-in allows remote attackers to cause a denial of service or possibly have other unspecified impacts. This is due to improper management of...
PT-2013-3957
Name of the Vulnerable Software and Affected Versions Google Chrome OS versions prior to 26.0.1410.57 Description The issue is related to the improper enforcement of origin restrictions for the O3D and Google Talk plug-ins. This allows remote attackers to bypass the domain-whitelist protection...
PT-2013-3956
Name of the Vulnerable Software and Affected Versions Google Chrome OS versions prior to 26.0.1410.57 Description The issue is related to the improper enforcement of origin restrictions for the O3D and Google Talk plug-ins. This allows remote attackers to bypass the domain-whitelist protection...
CVE-2013-2833: Undefined Security Weakness
Use-after-free vulnerability in the O3D plug-in in Google Chrome OS before 26.0.1410.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper management of ownership relationships involving Elements and DrawElements...
CVE-2013-2835: Undefined Security Weakness
Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability than CVE-2013-2834...