UBUNTU-CVE-2011-1190

The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...

CVE-2011-1190

The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...

Design/Logic Flaw

The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...

CVE-2011-1190

Removed by vendor...

CVE-2011-1190

CVE-2011-1190 involves the Web Workers cross-origin issue in Chrome before 10.0.648.127. The vulnerability allowed remote attackers to bypass the Same Origin Policy via an error-message leak, potentially exposing partial data to other origins. Affected software: Google Chrome/Chromium WebKit impl...

CVE-2011-1190

The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...

Debian DSA-2187-1 : icedove - several vulnerabilities

Several vulnerabilities have been discovered in Icedove, an unbranded version of the Thunderbird mail/news client. - CVE-2010-1585 Roberto Suggi Liverani discovered that the sanitising performed by ParanoidFragmentSink was incomplete. - CVE-2011-0051 Zach Hoffmann discovered that incorrect parsin...

Debian DSA-2186-1 : iceweasel - several vulnerabilities

Several vulnerabilities have been discovered in Iceweasel, a web browser based on Firefox. The included XULRunner library provides rendering services for several other applications included in Debian. - CVE-2010-1585 Roberto Suggi Liverani discovered that the sanitising performed by...

[SECURITY] [DSA 2186-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2186-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 09, 2011 http://www.debian.org/security/faq -...

Mozilla Foundation Security Advisory 2011-06

Mozilla Foundation Security Advisory 2011-06 Title: Use-after-free error using Web Workers Impact: Critical Announced: March 1, 2011 Reporter: Daniel Kozlowski Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.14 Firefox 3.5.17 SeaMonkey 2.0.12 Description Daniel Kozlowski reported that a...

DSA-2180-1 iceape - several

Bulletin has no description...

CVE-2011-0057

Use-after-free vulnerability in the Web Workers implementation in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to execute arbitrary code via vectors related to a JavaScript Worker and garbage collection...

Design/Logic Flaw

Use-after-free vulnerability in the Web Workers implementation in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to execute arbitrary code via vectors related to a JavaScript Worker and garbage collection...

CVE-2011-0057

CVE-2011-0057 is a use-after-free vulnerability in the Web Workers implementation of Mozilla Firefox. Affected products and versions: Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12. The issue arises from a use-after-free in interactions between a JavaScript Worker and ...

Mozilla use-after-free error using Web Workers (MFSA 2011-06)

Use-after-free vulnerability in the Web Workers implementation in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to execute arbitrary code via vectors related to a JavaScript Worker and garbage collection...

CVE-2011-0057

Use-after-free vulnerability in the Web Workers implementation in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to execute arbitrary code via vectors related to a JavaScript Worker and garbage collection...

mozilla -- multiple vulnerabilities

The Mozilla Project reports: MFSA 2011-01 Miscellaneous memory safety hazards rv:1.9.2.14/ 1.9.1.17 MFSA 2011-02 Recursive eval call causes confirm dialogs to evaluate to true MFSA 2011-03 Use-after-free error in JSON.stringify MFSA 2011-04 Buffer overflow in JavaScript upvarMap MFSA 2011-05 Buff...

SuSE 10 Security Update : Mozilla XULRunner (ZYPP Patch Number 6866)

Mozilla XUL Runner engine 1.9.0 was upgraded to version 1.9.0.8, fixing various bugs and security issues. The following security issues have been fixed : - Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some o...

Mandriva Linux Security Advisory : firefox (MDVSA-2009:294)

Security issues were identified and fixed in firefox 3.5.x : Security researcher Alin Rad Pop of Secunia Research reported a heap-based buffer overflow in Mozilla's string to floating point number conversion routines. Using this vulnerability an attacker could craft some malicious JavaScript code...

Mozilla Foundation Security Advisory 2010-42

Mozilla Foundation Security Advisory 2010-42 Title: Cross-origin data disclosure via Web Workers and importScripts Impact: High Announced: July 20, 2010 Reporter: Yosuke Hasegawa Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.7 Firefox 3.5.11 Thunderbird 3.1.1 Thunderbird 3.0.6...