PT-2011-4119

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 13.0.782.107 Description The issue allows remote attackers to bypass the Same Origin Policy via vectors related to handling of the base URI. Recommendations For versions prior to 13.0.782.107, update to version...

PT-2011-4108

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 13.0.782.107 Description The issue allows remote attackers to bypass the Same Origin Policy and conduct script injection attacks. Recommendations For versions prior to 13.0.782.107, update to version 13.0.782.10...

PT-2011-2198

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0.6 Description The issue allows remote attackers to bypass the Same Origin Policy and modify the rendering of text from arbitrary web sites via a Java applet that loads fonts. Recommendations For versions prio...

CVE-2011-0219: Undefined Security Weakness

Apple Safari before 5.0.6 allows remote attackers to bypass the Same Origin Policy, and modify the rendering of text from arbitrary web sites, via a Java applet that loads fonts...

CVE-2011-2362: Undefined Security Weakness

Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 do not distinguish between cookies for two domain names that differ only in a trailing dot, which allows remote web servers to bypass the Same Origin Policy via Set-Cookie headers...

PT-2011-3801

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.6.18 Thunderbird versions prior to 3.1.11 SeaMonkey versions prior to 2.0.15 Description The issue allows remote web servers to bypass the Same Origin Policy via Set-Cookie headers, as the software does not...

CVE-2011-2342

The DOM implementation in Google Chrome before 12.0.742.91 allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

CVE-2011-2332: Improper Input Validation

Google V8, as used in Google Chrome before 12.0.742.91, allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

CVE-2011-2342: Improper Neutralization of Input During Web Page Generation

The DOM implementation in Google Chrome before 12.0.742.91 allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

PT-2011-3784

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 12.0.742.91 Description The issue allows remote attackers to bypass the Same Origin Policy via unspecified vectors in the DOM implementation. Recommendations For versions prior to 12.0.742.91, update to version...

PT-2011-3780

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 12.0.742.91 Description The issue allows remote attackers to bypass the Same Origin Policy. Recommendations For versions prior to 12.0.742.91, update to version 12.0.742.91 or later to resolve the issue...

Google Chrome < 12.0.742.91 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 12.0.742.91. Such versions of Chrome are affected by multiple vulnerabilities: - Use-after-free errors exist in the handling of float variables, accessibility functionality, developer tools and an image loader. Issues 73962...

PT-2011-3133

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 11.0.696.57 Description The issue allows remote attackers to bypass the Same Origin Policy via vectors involving blobs. Recommendations For versions prior to 11.0.696.57, update to version 11.0.696.57 or later t...

CVE-2011-1438: Improper Input Validation

Google Chrome before 11.0.696.57 allows remote attackers to bypass the Same Origin Policy via vectors involving blobs...

CVE-2011-0187: Undefined Security Weakness

The plug-in in QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via vectors involving a cross-site redirect...

PT-2011-2168

Name of the Vulnerable Software and Affected Versions QuickTime in Apple Mac OS X versions prior to 10.6.7 Description The issue allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via vectors involving a cross-site redirect. Recommendations For...

CVE-2011-1193

Google V8, as used in Google Chrome before 10.0.648.127, allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

CVE-2011-1187

Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...

CVE-2011-1190

The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...

CVE-2011-0161: Improper Input Validation

WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle the Attr.style accessor, which allows remote attackers to bypass the Same Origin Policy and inject Cascading Style Sheets CSS token sequences via a crafted web site...