CVE-2015-1236

The CVE-2015-1236 entry refers to a Chrome/Blink vulnerability in the Web Audio API: MediaElementAudioSourceNode::process in Blink’s Web Audio implementation allows a remote site with a media element to bypass Same Origin Policy and access sensitive audio samples. Impact data from the sources con...

UBUNTU-CVE-2015-1235

The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in the HTML parser in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy via a crafted HTML document with an IFRAME element...

UBUNTU-CVE-2015-1236

The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy and obtain sensitive audio sample values via a...

CVE-2015-1235

The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in the HTML parser in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy via a crafted HTML document with an IFRAME element...

CVE-2015-1236

The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy and obtain sensitive audio sample values via a...

CVE-2015-1235: Undefined Security Weakness

The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in the HTML parser in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy via a crafted HTML document with an IFRAME element...

CVE-2015-1236: Undefined Security Weakness

The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy and obtain sensitive audio sample values via a...

chromium-browser: Cross-origin-bypass in Blink

The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy and obtain sensitive audio sample values via a...

Microsoft Windows MSXML3 Same Origin Policy SFB Vulnerability

Microsoft XML Core Services MSXML is a set of services that can be used to build XML-based Windows-native applications written in JScript, VBScript, and Microsoft development tools. A same-origin policy security feature bypass vulnerability exists in Microsoft XML Core Services MSXML. This...

Microsoft Windows XML Core Services Security Feature Bypass Vulnerability (3046482)

This host is missing an important security update according to Microsoft Bulletin MS15-039. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2015-1646

Microsoft XML Core Services aka MSXML 3.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted DTD, aka "MSXML3 Same Origin Policy SFB Vulnerability."...

Design/Logic Flaw

Microsoft XML Core Services aka MSXML 3.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted DTD, aka "MSXML3 Same Origin Policy SFB Vulnerability."...

CVE-2015-1646

Microsoft XML Core Services aka MSXML 3.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted DTD, aka "MSXML3 Same Origin Policy SFB Vulnerability."...

CVE-2015-1646

CVE-2015-1646 affects Microsoft XML Core Services (MSXML) 3.0. The vulnerability is a same-origin policy security bypass in MSXML3 that can allow remote attackers to obtain sensitive information via a crafted DTD. Multiple sources (NVD entry and vulnerability repositories) describe the issue and ...

CVE-2015-1646: Undefined Security Weakness

Microsoft XML Core Services aka MSXML 3.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted DTD, aka "MSXML3 Same Origin Policy SFB Vulnerability."...

PT-2015-1068

Name of the Vulnerable Software and Affected Versions Microsoft XML Core Services aka MSXML 3.0 Description The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted DTD. This vulnerability is related to a component of the Windows operating...

PT-2015-1095

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 42.0.2311.90 Opera affected versions not specified Description The issue concerns the MediaElementAudioSourceNode::process function in the Web Audio API implementation in Blink. This function allows remote...

PT-2015-1094

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 42.0.2311.90 Opera affected versions not specified Description The issue is related to the ContainerNode::parserRemoveChild function in the HTML parser in Blink. It allows remote attackers to bypass the Same...

Microsoft XML Core Services CVE-2015-1646 Same Origin Policy Security Bypass Vulnerability

Description Microsoft XML Core Services is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass the same-origin policy and perform unauthorized actions. This could be used to steal sensitive information or launch other attacks. Technologies Affected Avaya CallPil...

MS15-039: Vulnerability in XML Core Services Could Allow Security Feature Bypass (3046482)

The remote host contains a version of Microsoft XML Core Services MSXML that is affected by a same-origin policy security bypass vulnerability. A remote attacker can exploit this vulnerability by convincing a user to click a specially crafted link, resulting in the disclosure of sensitive user...