webkit: bad cast with text editing

The text-editing implementation in Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not check a node type before performing a cast, which has unspecified impact and attack vectors related to 1 DeleteSelectionCommand.cpp, 2 InsertLineBreakCommand.cpp, or 3...

WebKit: Use-after-free vulnerabiity related to text editing causes memory corruption

Use-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving text editing...

Design/Logic Flaw

Use-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving text editing...

CVE-2010-4197

Removed by vendor...

Google Chrome < 7.0.517.44 Multiple Vulnerabilities

Binary data 800908.prm...

CVE-2010-3114

The text-editing implementation in Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not check a node type before performing a cast, which has unspecified impact and attack vectors related to 1 DeleteSelectionCommand.cpp, 2 InsertLineBreakCommand.cpp, or 3...

CVE-2010-3114

The text-editing implementation in Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not check a node type before performing a cast, which has unspecified impact and attack vectors related to 1 DeleteSelectionCommand.cpp, 2 InsertLineBreakCommand.cpp, or 3...

CVE-2010-3114

CVE-2010-3114 affects Google Chrome prior to 5.0.375.127 and webkitgtk prior to 1.2.6. The root cause is a failure to properly handle SVG documents due to incorrect processing within WebKit’s text/SVG handling paths, enabling remote attackers to induce a denial of service through memory corruptio...

CVE-2010-3114

The text-editing implementation in Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not check a node type before performing a cast, which has unspecified impact and attack vectors related to 1 DeleteSelectionCommand.cpp, 2 InsertLineBreakCommand.cpp, or 3...

CVE-2010-3114

Removed by vendor...

Google Chrome < 5.0.375.127 Multiple Vulnerabilities

Binary data 5644.pasl...

Google Chrome < 5.0.375.127 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 5.0.375.127. Such versions are reportedly affected by multiple vulnerabilities : - A memory corruption vulnerability exists with the file dialog. Issue 45400 - A memory corruption vulnerability exists when processing SVG...

openSUSE 10 Security Update : opera (opera-4858)

Opera released version 9.25 of their browser to fix various security problems. CVE-2007-6520: Fixed an issue where plug-ins could be used to allow cross domain scripting, as reported by David Bloom. Details will be disclosed at a later date. CVE-2007-6521: Fixed an issue with TLS certificates tha...

GLSA-200712-22 : Opera: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200712-22 Opera: Multiple vulnerabilities David Bloom reported two vulnerabilities where plug-ins CVE-2007-6520 and Rich text editing CVE-2007-6522 could be used to allow cross domain scripting. Alexander Klink Cynops GmbH...

CVE-2007-6522

The rich text editing functionality in Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks by using designMode to modify contents of pages in other domains...

CVE-2007-6522

The rich text editing functionality in Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks by using designMode to modify contents of pages in other domains...

CVE-2007-6522

Opera prior to version 9.25 contains CVE-2007-6522 where rich text editing via designMode can be abused to perform cross-domain scripting. The vulnerability’s impact is described as enabling cross-site scripting by modifying contents in pages on other domains, with associated risk of information ...

CVE-2007-6522

The rich text editing functionality in Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks by using designMode to modify contents of pages in other domains...

opera -- multiple vulnerabilities

Opera Software ASA reports about multiple security fixes: Fixed an issue where plug-ins could be used to allow cross domain scripting, as reported by David Bloom. Details will be disclosed at a later date. Fixed an issue with TLS certificates that could be used to execute arbitrary code, as...