Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-2336 State: PUBLISHED Published: 2019-11-07T17:46:24 Last Updated: 2024-08-06T23:00:32.918Z Vendors: Google Products: Chrome Problem Types: transition mishandling Description: An issue exists in WebKit in Google Chrome before Blink M12. when clearing lists in AnimationControllerPrivate that signal when a hardware animation starts. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/chromium/issues/detail?id=82096 - http://trac.webkit.org/changeset/85693 - http://trac.webkit.org/changeset/86127
CVE ID: CVE-2011-2337 State: PUBLISHED Published: 2019-11-07T17:07:29 Last Updated: 2024-08-06T23:00:32.963Z Vendors: Google Products: Chrome on 64-bit platforms Problem Types: type confusion Description: A wrong type is used for a return value from strlen in WebKit in Google Chrome before Blink M12 on 64-bit platforms. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/chromium/issues/detail?id=82152 - http://trac.webkit.org/changeset/86106 - http://trac.webkit.org/changeset/86173
CVE ID: CVE-2011-2338 State: PUBLISHED Published: 2011-10-12T18:00:00 Last Updated: 2024-08-06T23:00:32.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//
.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html - http://www.securityfocus.com/bid/50066 - http://support.apple.com/kb/HT4999 - http://support.apple.com/kb/HT5000 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17362
CVE ID: CVE-2011-2339 State: PUBLISHED Published: 2011-10-12T18:00:00 Last Updated: 2024-08-06T23:00:33.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//
.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17020 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html - http://www.securityfocus.com/bid/50066 - http://support.apple.com/kb/HT4999 - http://support.apple.com/kb/HT5000
CVE ID: CVE-2011-2341 State: PUBLISHED Published: 2011-10-12T18:00:00 Last Updated: 2024-08-06T23:00:32.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17084 - http://lists.apple.com/archives/Secur
.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17084 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html - http://www.securityfocus.com/bid/50066 - http://support.apple.com/kb/HT4999 - http://support.apple.com/kb/HT5000
CVE ID: CVE-2011-2342 State: PUBLISHED Published: 2011-06-09T19:00:00 Last Updated: 2024-08-06T23:00:32.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DOM implementation in Google Chrome before 12.0.742.91 allows remote attackers to bypass the Same Origin Policy via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/72791 - http://secunia.com/advisories/44829 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14663 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67904 - http://googlechromereleases.blogspot.com/2011/06/chrome-stable-release.html - http://code.google.com/p/chro
ties/67904 - http://googlechromereleases.blogspot.com/2011/06/chrome-stable-release.html - http://code.google.com/p/chromium/issues/detail?id=83743 - http://www.securityfocus.com/bid/48129
CVE ID: CVE-2011-2343 State: PUBLISHED Published: 2020-02-12T19:01:48 Last Updated: 2024-08-06T23:00:33.139Z Vendors: Google Products: Android Problem Types: access to sensitive information Description: The Bluetooth stack in Android before 2.3.6 allows a physically proximate attacker to obtain contact information via an AT phonebook transfer. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/android/issues/detail?id=21347 - https://deepsec.net/docs/Slides/2013/DeepSec_2013_Jaime_Sanchez_-_Building_The_First_Android_IDS_On_Network_Level.pdf
CVE ID: CVE-2011-2344 State: PUBLISHED Published: 2011-07-08T17:00:00Z Last Updated: 2024-09-16T18:49:52.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Android Picasa in Android 3.0 and 2.x through 2.3.4 uses a cleartext HTTP session when transmitting the authToken obtained from ClientLogin, which allows remote attackers to gain privileges and access private pictures and web albums by sniffing the token from connections with picasaweb.google.com. Additional Analyst Notes: - CVE Program Container: References: - http://android.git.kernel.org/?p=platform/packages/apps/Gallery3D.git%3Ba=commit%3Bh=9a418de454e5ce078c98f41b5c18e3bb9175bd20 - http://android.git.kernel.org/?p=platfo
ges/apps/Gallery3D.git%3Ba=commit%3Bh=9a418de454e5ce078c98f41b5c18e3bb9175bd20 - http://android.git.kernel.org/?p=platform/packages/apps/Gallery3D.git%3Ba=commit%3Bh=7a763db1c15bb6436be85a3f23382e4171970b6e - http://www.uni-ulm.de/en/in/mi/staff/koenings/catching-authtokens.html
CVE ID: CVE-2011-2345 State: PUBLISHED Published: 2011-06-29T17:00:00 Last Updated: 2024-08-06T23:00:32.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NPAPI implementation in Google Chrome before 12.0.742.112 does not properly handle strings, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14411 - http://googlechromereleases.blogspot.com/2011/06/stable-channel-update_28.html - http://secunia.com/advisories/45097 - http://code.google.com/p/chromium/issues/detail?id=7
able-channel-update_28.html - http://secunia.com/advisories/45097 - http://code.google.com/p/chromium/issues/detail?id=77493 - http://www.securitytracker.com/id?1025730
CVE ID: CVE-2011-2346 State: PUBLISHED Published: 2011-06-29T17:00:00 Last Updated: 2024-08-06T23:00:33.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG fonts. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2011/06/stable-channel-update_28.html - http://secunia.com/advisories/45097 - http://code.google.com/p/chromium/issues/detail?id=84355 - http://www.securitytracker.com/id?1025730 - https://oval.cisecurity.org/repository/search/defin
issues/detail?id=84355 - http://www.securitytracker.com/id?1025730 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14103
CVE ID: CVE-2011-2347 State: PUBLISHED Published: 2011-06-29T17:00:00 Last Updated: 2024-08-06T23:00:33.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 12.0.742.112 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=85003 - http://googlechromereleases.blogspot.com/2011/06/stable-channel-update_28.html - http://secunia.com/advisories/45097 - http://www.securitytracker.com/id?1025730
2011/06/stable-channel-update_28.html - http://secunia.com/advisories/45097 - http://www.securitytracker.com/id?1025730 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14649
CVE ID: CVE-2011-2348 State: PUBLISHED Published: 2011-06-29T17:00:00 Last Updated: 2024-08-06T23:00:33.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google V8, as used in Google Chrome before 12.0.742.112, performs an incorrect bounds check, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2011/06/stable-channel-update_28.html - http://secunia.com/advisories/45097 - http://www.securitytracker.com/id?1025730 - http://code.google.com/p/chromium/issues/detail?id=85177 - https://oval.cisecurity.org/re
curitytracker.com/id?1025730 - http://code.google.com/p/chromium/issues/detail?id=85177 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14324
CVE ID: CVE-2011-2349 State: PUBLISHED Published: 2011-06-29T17:00:00 Last Updated: 2024-08-06T23:00:33.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to text selection. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2011/06/stable-channel-update_28.html - http://secunia.com/advisories/45097 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14712 - http://www.securitytracker.com/id?1025730 - http://co
repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14712 - http://www.securitytracker.com/id?1025730 - http://code.google.com/p/chromium/issues/detail?id=85418
CVE ID: CVE-2011-2350 State: PUBLISHED Published: 2011-06-29T17:00:00 Last Updated: 2024-08-06T23:00:33.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTML parser in Google Chrome before 12.0.742.112 does not properly address "lifetime and re-entrancy issues," which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2011/06/stable-channel-update_28.html - http://secunia.com/advisories/45097 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14479 - http://www.securi
45097 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14479 - http://www.securitytracker.com/id?1025730 - http://code.google.com/p/chromium/issues/detail?id=85102
CVE ID: CVE-2011-2351 State: PUBLISHED Published: 2011-06-29T17:00:00 Last Updated: 2024-08-06T23:00:33.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG use elements. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://googlechromereleases.blogspot.com/2011/06/stable-channel-update_28.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://secunia.com/advisories/45097 - http://lists.apple.com/archives/Se
ves/Security-announce/2011//Oct/msg00001.html - http://secunia.com/advisories/45097 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14053 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html - http://www.securitytracker.com/id?1025730 - http://support.apple.com/kb/HT4999 - http://code.google.com/p/chromium/issues/detail?id=85211 - http://support.apple.com/kb/HT5000
CVE ID: CVE-2011-2352 State: PUBLISHED Published: 2011-10-12T18:00:00 Last Updated: 2024-08-06T23:00:33.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17133 - http://lists.apple.com/archives/Secur
.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17133 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html - http://www.securityfocus.com/bid/50066 - http://support.apple.com/kb/HT4999 - http://osvdb.org/76339 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70496 - http://support.apple.com/kb/HT5000
CVE ID: CVE-2011-2353 State: PUBLISHED Published: 2019-11-07T16:35:33 Last Updated: 2024-08-06T23:00:33.787Z Vendors: Google Products: Chrome Problem Types: use after free Description: Use after free vulnerability in documentloader in WebKit in Google Chrome before Blink M13 in DocumentWriter::replaceDocument function. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/chromium/issues/detail?id=84946 - http://trac.webkit.org/changeset/87959 - http://trac.webkit.org/changeset/88813 - http://trac.webkit.org/changeset/88197
CVE ID: CVE-2011-2354 State: PUBLISHED Published: 2011-10-12T18:00:00 Last Updated: 2024-08-06T23:00:33.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/76340 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16865 - http://support.apple.com/kb/HT4981 - http://lists
org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16865 - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/70499 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html - http://www.securityfocus.com/bid/50066 - http://support.apple.com/kb/HT4999 - http://support.apple.com/kb/HT5000
CVE ID: CVE-2011-2356 State: PUBLISHED Published: 2011-10-12T18:00:00 Last Updated: 2024-08-06T23:00:33.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//
.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/70500 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html - http://www.securityfocus.com/bid/50066 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17340 - http://support.apple.com/kb/HT4999 - http://support.apple.com/kb/HT5000 - http://osvdb.org/76341
CVE ID: CVE-2011-2357 State: PUBLISHED Published: 2011-08-12T18:00:00 Last Updated: 2024-08-06T23:00:33.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-application scripting vulnerability in the Browser URL loading functionality in Android 2.3.4 and 3.1 allows local applications to bypass the sandbox and execute arbitrary Javascript in arbitrary domains by (1) causing the MAX_TAB number of tabs to be opened, then loading a URI to the targeted domain into the current tab, or (2) making two startActivity function calls beginning with the targeted domain's URI followed by the malicious Javascript while the UI focus is still associated with the targeted domain. Additional A
s URI followed by the malicious Javascript while the UI focus is still associated with the targeted domain. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/74260 - http://android.git.kernel.org/?p=platform/packages/apps/Browser.git%3B%20a=commit%3Bh=096bae248453abe83cbb2e5a2c744bd62cdb620b - http://android.git.kernel.org/?p=platform/cts.git%3Ba=commit%3Bh=7e48fb87d48d27e65942b53b7918288c8d740e17 - http://www.securityfocus.com/archive/1/519146/100/0/threaded - http://secunia.com/advisories/45457 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68937 - http://www.securityfocus.com/bid/48954 - http://android.git.kernel.org/?p=platform/packages/apps/Browse
bilities/68937 - http://www.securityfocus.com/bid/48954 - http://android.git.kernel.org/?p=platform/packages/apps/Browser.git%3B%20a=commit%3Bh=afa4ab1e4c1d645e34bd408ce04cadfd2e5dae1e - http://blog.watchfire.com/files/advisory-android-browser.pdf - http://www.infsec.cs.uni-saarland.de/projects/android-vuln/android_xss.pdf - http://www.infsec.cs.uni-saarland.de/projects/android-vuln/ - http://blog.watchfire.com/wfblog/2011/08/android-browser-cross-application-scripting-cve-2011-2357.html - http://seclists.org/fulldisclosure/2011/Aug/9 - http://securitytracker.com/id?1025881 - http://securityreason.com/securityalert/8335
CVE ID: CVE-2011-2358 State: PUBLISHED Published: 2011-08-03T00:00:00 Last Updated: 2024-08-06T23:00:33.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 13.0.782.107 does not ensure that extension installations are confirmed by a browser dialog, which makes it easier for remote attackers to modify the product's functionality via a Trojan horse extension. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html - http://osvdb.org/74228 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68940 - http://code.google.com/p/chromium/issues/detail?id=75821 - https://oval.cisecu
orce.ibmcloud.com/vulnerabilities/68940 - http://code.google.com/p/chromium/issues/detail?id=75821 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14425
CVE ID: CVE-2011-2359 State: PUBLISHED Published: 2011-08-03T00:00:00 Last Updated: 2024-08-06T23:00:33.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 13.0.782.107 does not properly track line boxes during rendering, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/68941 - http://code.google.com/p/chromium/issues/detail?id=78841 - http://support.apple.com/kb/HT4981 - http://googlechromereleases.blogspot.com/2011/08/stable-channel-update
l?id=78841 - http://support.apple.com/kb/HT4981 - http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html - http://www.debian.org/security/2011/dsa-2307 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14671 - http://support.apple.com/kb/HT4999 - http://osvdb.org/74229 - http://support.apple.com/kb/HT5000
CVE ID: CVE-2011-2360 State: PUBLISHED Published: 2011-08-03T00:00:00 Last Updated: 2024-08-06T23:00:33.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 13.0.782.107 does not ensure that the user is prompted before download of a dangerous file, which makes it easier for remote attackers to bypass intended content restrictions via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html - http://osvdb.org/74230 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68942 - http://code.google.com/p/chromium/issues/detail?id=79266 - https://oval.cisecurity.
ibmcloud.com/vulnerabilities/68942 - http://code.google.com/p/chromium/issues/detail?id=79266 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14362
CVE ID: CVE-2011-2361 State: PUBLISHED Published: 2011-08-03T00:00:00 Last Updated: 2024-08-06T23:00:32.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Basic Authentication dialog implementation in Google Chrome before 13.0.782.107 does not properly handle strings, which might make it easier for remote attackers to capture credentials via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14595 - http://code.google.com/p/chromium/issues/detail?id=79426 - https://exchange.xforc
/oval%3Aorg.mitre.oval%3Adef%3A14595 - http://code.google.com/p/chromium/issues/detail?id=79426 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68943 - http://osvdb.org/74231
CVE ID: CVE-2011-2362 State: PUBLISHED Published: 2011-06-30T16:00:00 Last Updated: 2024-08-06T23:00:32.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 do not distinguish between cookies for two domain names that differ only in a trailing dot, which allows remote web servers to bypass the Same Origin Policy via Set-Cookie headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:111 - http://secunia.com/advisories/45002 - http://support.avaya.com/css/P8/documents/100145333 - http://www.ubuntu.com/usn/USN-1149-1 - ht