CVE-2011-3956

The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which might allow remote attackers to bypass the Same Origin Policy via a crafted extension...

CVE-2011-3956: Origin Validation Error

The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which might allow remote attackers to bypass the Same Origin Policy via a crafted extension...

PT-2012-1763

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 17.0.963.46 Description The issue arises from the extension implementation not properly handling sandboxed origins. This could potentially allow remote attackers to bypass the Same Origin Policy by using a craft...

PT-2011-5028

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.60 Description The issue is related to the improper implementation of the in operator in the JavaScript engine, allowing remote attackers to bypass the Same Origin Policy. This can be achieved via vectors related to...

CVE-2011-4681: Undefined Security Weakness

Opera before 11.60 does not properly consider the number of . dot characters that conventionally exist in domain names of different top-level domains, which allows remote attackers to bypass the Same Origin Policy by leveraging access to a different domain name in the same top-level domain, as...

CVE-2011-4682: Undefined Security Weakness

The JavaScript engine in Opera before 11.60 does not properly implement the in operator, which allows remote attackers to bypass the Same Origin Policy via vectors related to variables on different web sites...

CVE-2011-3649: Exposure of Sensitive Information to an Unauthorized Actor

Mozilla Firefox 7.0 and Thunderbird 7.0, when the Direct2D aka D2D API is used on Windows in conjunction with the Azure graphics back-end, allow remote attackers to bypass the Same Origin Policy, and obtain sensitive image data from a different domain, by inserting this data into a canvas. NOTE:...

CVE-2011-3653: Exposure of Sensitive Information to an Unauthorized Actor

Mozilla Firefox before 8.0 and Thunderbird before 8.0 on Mac OS X do not properly interact with the GPU memory behavior of a certain driver for Intel integrated GPUs, which allows remote attackers to bypass the Same Origin Policy and read image data via vectors related to WebGL textures...

PT-2011-4564

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 8.0 Thunderbird versions prior to 8.0 Description The issue arises from improper interaction with the GPU memory behavior of a certain driver for Intel integrated GPUs, allowing remote attackers to bypass the...

PT-2011-4560

Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 7.0 Thunderbird version 7.0 Description The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive image data from a different domain by inserting this data into a canvas when the Direct2D A...

PT-2011-4752

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 15.0.874.102 Android versions prior to 4.4 Description The issue allows remote attackers to bypass the Same Origin Policy, enabling them to conduct Universal XSS UXSS attacks. This can be achieved through variou...

CVE-2011-3881: Improper Neutralization of Input During Web Page Generation

WebKit, as used in Google Chrome before 15.0.874.102 and Android before 4.4, allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS UXSS attacks via vectors related to 1 the DOMWindow::clear function and use of a selection object, 2 the...

Google Chrome multiple vulnerabilities - October11 (Linux)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnoct11lin.nasl 7006 2017-08-25 11:51:20Z teissa $ Google Chrome multiple vulnerabilities - October11 Linux Authors: Sooraj KS Copyright: Copyright c 2011 Greenbo...

CVE-2011-2878

Google Chrome before 14.0.835.202 does not properly restrict access to the window prototype, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

CVE-2011-2878: Undefined Security Weakness

Google Chrome before 14.0.835.202 does not properly restrict access to the window prototype, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

PT-2011-4164

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 14.0.835.202 Description The issue is related to improper restriction of access to the window prototype, allowing remote attackers to bypass the Same Origin Policy. Recommendations For versions prior to...

CVE-2011-2999: Undefined Security Weakness

Mozilla Firefox before 3.6.23 and 4.x through 5, Thunderbird before 6.0, and SeaMonkey before 2.3 do not properly handle "location" as the name of a frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, a different vulnerability than CVE-2010-0170...

PT-2011-4237

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.6.23 Mozilla Firefox versions 4.x through 5 Thunderbird versions prior to 6.0 SeaMonkey versions prior to 2.3 Description The issue arises from improper handling of "location" as the name of a frame, allowin...

CVE-2011-2856

Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

CVE-2011-2856: Origin Validation Error

Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to bypass the Same Origin Policy via unspecified vectors...