Most recent entries from all

CERTA-2010-AVI-077 — De multiples vulnérabilités dans Google Chrome permettent, entre autres, l'exécution de cod…

2026-10-20T06:29:13.804602+00:00

CERTA-2010-AVI-077

fkie_cve-2010-0651

2026-10-20T06:29:13.804671+00:00

GHSA-vffh-48qx-8xgf

2026-10-20T06:29:13.804717+00:00

gsd-2010-0651

2026-10-20T06:29:13.804741+00:00

gsd-2010-0651

VAR-201002-0202

2026-10-20T06:29:13.804757+00:00

WebKit before r52784, as used in Google Chrome before 4.0.249.78 and Apple Safari before 4.0.5, permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document. Google Chrome is prone to multiple vulnerabilities: - multiple memory-corruption issues. - multiple security-bypass issues. - input-validation issues. - denial-of-service issues. Attackers can exploit these issues to bypass certain security checks, execute arbitrary code in the context of the browser, and cause denial-of-service conditions; other attacks are also possible. Versions prior to Chrome 4.0.249.78 are vulnerable. NOTE: Some of these issues have received their own record to better document them. WebKit is an open source browser web page layout engine, and the corresponding engines are Gecko (the layout engine used by Mozilla, Firefox, etc.) and Trident (also known as MSHTML, the layout engine used by IE). A specially crafted file could allow remote attackers to obtain sensitive information. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2011:039 http://www.mandriva.com/security/ _______________________________________________________________________

Package : webkit Date : March 2, 2011 A…