434 matches found
CVE-2014-1726
Removed by vendor...
CVE-2014-1726: Undefined Security Weakness
The drag implementation in Google Chrome before 34.0.1847.116 allows user-assisted remote attackers to bypass the Same Origin Policy and forge local pathnames by leveraging renderer access...
CVE-2013-7331
The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild ...
CVE-2013-7331
The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild ...
CVE-2013-6660
The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows remote attackers to discover full pathnames via a crafted web site...
CVE-2013-6660
The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows remote attackers to discover full pathnames via a crafted web site...
Code injection
The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows remote attackers to discover full pathnames via a crafted web site...
CVE-2013-6660
The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows remote attackers to discover full pathnames via a crafted web site...
CVE-2013-6660
Removed by vendor...
CVE-2013-6660: Undefined Security Weakness
The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows remote attackers to discover full pathnames via a crafted web site...
Microsoft Antimalware Client Privilege Elevation Vulnerability (2823482)
This host is missing an important security update according to Microsoft Bulletin MS13-034. OpenVAS Vulnerability Test $Id: secpodms13-034.nasl 5339 2017-02-18 16:28:22Z cfi $ Microsoft Antimalware Client Privilege Elevation Vulnerability 2823482 Authors: Veerendra GG Copyright: Copyright c 2013...
MS13-034: Vulnerability in Microsoft Antimalware Client Could Allow Elevation of Privilege (2823482)
The remote host is running a version of the Microsoft Antimalware Client that could allow elevation of privilege due to the way that pathnames are used. By successfully exploiting this vulnerability, an attacker could execute arbitrary code and take complete control of an affected system. But the...
CVE-2013-0895
Google Chrome before 25.0.1364.97 on Linux, and before 25.0.1364.99 on Mac OS X, does not properly handle pathnames during copy operations, which might make it easier for remote attackers to execute arbitrary programs via unspecified vectors...
CVE-2013-0842
Google Chrome before 24.0.1312.56 does not properly handle %00 characters in pathnames, which has unspecified impact and attack vectors...
Design/Logic Flaw
Google Chrome before 24.0.1312.56 does not properly handle %00 characters in pathnames, which has unspecified impact and attack vectors...
CVE-2013-0842
Google Chrome before 24.0.1312.56 does not properly handle %00 characters in pathnames, which has unspecified impact and attack vectors...
CVE-2013-0842
Technical details about CVE-2013-0842 are not publicly provided in the connected documents. Monitor for updates from OpenVAS and GLSA entries; sources reference Chrome vulnerabilities in general but do not provide specifics for this CVE.
CVE-2013-0842
Removed by vendor...
CVE-2013-0842
Google Chrome before 24.0.1312.56 does not properly handle %00 characters in pathnames, which has unspecified impact and attack vectors...
CVE-2013-0842: Undefined Security Weakness
Google Chrome before 24.0.1312.56 does not properly handle %00 characters in pathnames, which has unspecified impact and attack vectors...