3 matches found
Updated chromium-browser-stable packages fix security vulnerabilities
Chromium-browser 47.0.2526.73 fixes several security issues: Use-after-free bugs in AppCache CVE-2015-6765, CVE-2015-6766, CVE-2015-6767. Cross-origin bypass problems in DOM CVE-2015-6768, CVE-2015-6770, CVE-2015-6772. A cross-origin bypass problem in core CVE-2015-6769. Out of bounds access bugs...
chromium-browser: Escaping issue in saved pages
The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web MOTW comments for URLs containing a "--" sequence, which might allow remote attackers to inject HTML via a crafted URL, as demonstrated by an initial http://example.com?-- substring...
Microsoft Internet Explorer saved pages crossite scripting
Crossite scripting in context of local machine is possible on saving URL with address like http://site/--scriptalert"XSS"/script...