Code injection

The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...

CVE-2015-1296

The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...

CVE-2015-1296

CVE-2015-1296 is a Chrome/Chromium vulnerability where the UnescapeURLWithAdjustmentsImpl in net/base/escape.cc could allow spoofing the SSL lock icon by displaying Unicode LOCK characters in the omnibox. Affected: Google Chrome prior to 45.0.2454.85. Root cause: improper handling in omnibox URL ...

CVE-2015-1296

The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...

CVE-2015-1296

Removed by vendor...

CVE-2015-1296

The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...

chromium-browser: Character spoofing in omnibox

The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...

CVE-2015-1296: Undefined Security Weakness

The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...

Code injection

The UDF filesystem implementation in the Linux kernel before 3.18.2 does not ensure that space is available for storing a symlink target's name along with a trailing \0 character, which allows local users to obtain sensitive information via a crafted filesystem image, related to fs/udf/symlink.c...

The vulnerability of the Mac OS X operating system, which allows a hacker to trigger a service failure

The vulnerability of the Data Detectors Engine component in the Mac OS X operating system arises due to buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause a service failure by using a sequence of Unicode characters...

Apple OS X Speech UI Memory Corruption Vulnerability

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in the Apple OS X Speech UI, which allows remote attackers to exploit the vulnerability by submitting a special Unicode string and tricking an application into parsing it, which can execute...

Apple OS X Data Detectors Engine Memory Corruption Vulnerability

Apple OS X is a BSD-based operating system distributed by Apple. A security vulnerability in the Apple OS X Data Detectors Engine allows remote attackers to exploit the vulnerability to create specially constructed unicode characters that can be induced to be parsed by an application, which can...

CVE-2015-5750

Data Detectors Engine in Apple OS X before 10.10.5 allows attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted series of Unicode characters...

CVE-2015-3794

The Speech UI in Apple OS X before 10.10.5, when speech alerts are enabled, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Unicode string...

Design/Logic Flaw

The Speech UI in Apple OS X before 10.10.5, when speech alerts are enabled, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Unicode string...

Memory corruption

Data Detectors Engine in Apple OS X before 10.10.5 allows attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted series of Unicode characters...

CVE-2015-3794

The Speech UI in Apple OS X before 10.10.5, when speech alerts are enabled, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Unicode string...

CVE-2015-5750

Data Detectors Engine in Apple OS X before 10.10.5 allows attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted series of Unicode characters...

CVE-2015-5750

CVE-2015-5750 affects Apple OS X Data Detectors Engine prior to 10.10.5. A crafted sequence of Unicode characters could cause memory corruption, enabling arbitrary code execution or a denial of service. Affected component is Data Detectors Engine; root cause is memory corruption from Unicode proc...

CVE-2015-5750: Improper Restriction of Operations within the Bounds of a Memory Buffer

Data Detectors Engine in Apple OS X before 10.10.5 allows attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted series of Unicode characters...