chromium -- multiple vulnerabilities

Google Chrome Releases reports: 162494 High CVE-2012-5145: Use-after-free in SVG layout. Credit to Atte Kettunen of OUSPG. 165622 High CVE-2012-5146: Same origin policy bypass with malformed URL. Credit to Erling A Ellingsen and Subodh Iyengar, both of Facebook. 165864 High CVE-2012-5147:...

PT-2013-1747

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 24.0.1312.52 Description The issue allows remote attackers to bypass the Same Origin Policy via a malformed URL. Recommendations For versions prior to 24.0.1312.52, update to version 24.0.1312.52 or later to...

Google Chrome < 24.0.1312.52 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 24.0.1312.52 and is, therefore, affected by the following vulnerabilities : - Use-after-free errors exist related to SVG layout, DOM handling, video seeking, PDF fields and printing. CVE-2012-5145, CVE-2012-5147,...

CVE-2012-0958: Undefined Security Weakness

content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API call, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted webpage...

PT-2012-2974

Name of the Vulnerable Software and Affected Versions unity-firefox-extension version 2.4.1 Description The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted webpage, due to the exposure of the toDataURL function in an API call in the...

CVE-2012-4196: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 allow remote attackers to bypass the Same Origin Policy and read the Location object via a prototype property-injection attack that defeats...

PT-2012-5240

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 16.0.2 Firefox ESR versions prior to 10.0.10 Thunderbird versions prior to 16.0.2 Thunderbird ESR versions prior to 10.0.10 SeaMonkey versions prior to 2.13.2 Description The issue allows remote attackers to...

Mozilla Firefox 15.x <= 15 Multiple Vulnerabilities

Binary data 801325.prm...

CVE-2012-4192: Undefined Security Weakness

Mozilla Firefox 16.0, Thunderbird 16.0, and SeaMonkey 2.13 allow remote attackers to bypass the Same Origin Policy and read the properties of a Location object via a crafted web site, a related issue to CVE-2012-4193...

CVE-2012-4193: Origin Validation Error

Mozilla Firefox before 16.0.1, Firefox ESR 10.x before 10.0.9, Thunderbird before 16.0.1, Thunderbird ESR 10.x before 10.0.9, and SeaMonkey before 2.13.1 omit a security check in the defaultValue function during the unwrapping of security wrappers, which allows remote attackers to bypass the Same...

PT-2012-5237

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 16.0.1 Firefox ESR versions prior to 10.0.9 Thunderbird versions prior to 16.0.1 Thunderbird ESR versions prior to 10.0.9 SeaMonkey versions prior to 2.13.1 Description The issue allows remote attackers to...

PT-2012-5236

Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 16.0 Thunderbird version 16.0 SeaMonkey version 2.13 Description A security issue allows remote attackers to bypass the Same Origin Policy and read the properties of a Location object via a crafted web site...

CVE-2012-3991: Undefined Security Weakness

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict JSAPI access to the GetProperty function, which allows remote attackers to bypass the Same Origin Policy and possibly have...

PT-2012-5119

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 16.0 Firefox ESR versions prior to 10.0.8 Thunderbird versions prior to 16.0 Thunderbird ESR versions prior to 10.0.8 SeaMonkey versions prior to 2.13 Description The issue allows remote attackers to bypass th...

CVE-2012-4908

Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink...

PT-2012-5654

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 18.0.1025308 on Android Description The issue allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink. Recommendations For Google Chrome versions...

CVE-2012-4908: Undefined Security Weakness

Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink...

Google Chrome for Android - Same-origin Policy Bypass Local Symlink

Google Chrome for Android - Same-origin Policy Bypass Local Symlink source: https://www.securityfocus.com/bid/55523/info Google Chrome for Android is prone to multiple vulnerabilities. Attackers may exploit these issues to execute arbitrary code in the context of the browser, obtain potentially...

Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code with the privileges of the user running SeaMonkey. CVE-2010-1211, CVE-2010-2753, CVE-2010-1214 A memory corruption fl...

Scientific Linux Security Update : firefox on SL4.x, SL5.x i386/x86_64

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2010-1208, CVE-2010-1209, CVE-2010-1211, CVE-2010-1212,...