Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-3861 State: PUBLISHED Published: 2011-09-28T10:00:00Z Last Updated: 2024-09-16T18:29:06.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web Minimalist 200901 theme before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://sitewat.ch/en/Advisories/19
CVE ID: CVE-2011-3862 State: PUBLISHED Published: 2011-09-28T10:00:00 Last Updated: 2024-08-06T23:46:03.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Morning Coffee theme before 3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46295 - https://sitewat.ch/en/Advisories/20
CVE ID: CVE-2011-3863 State: PUBLISHED Published: 2011-09-28T10:00:00Z Last Updated: 2024-09-16T18:49:10.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the RedLine theme before 1.66 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - https://sitewat.ch/en/Advisories/22
CVE ID: CVE-2011-3864 State: PUBLISHED Published: 2011-09-28T10:00:00Z Last Updated: 2024-09-17T00:21:40.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the The Erudite theme before 2.7.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cpage parameter. Additional Analyst Notes: - CVE Program Container: References: - https://sitewat.ch/en/Advisories/23
CVE ID: CVE-2011-3865 State: PUBLISHED Published: 2011-09-28T10:00:00Z Last Updated: 2024-09-17T00:56:15.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Black-LetterHead theme before 1.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://sitewat.ch/en/Advisories/24
CVE ID: CVE-2011-3866 State: PUBLISHED Published: 2011-09-29T00:00:00 Last Updated: 2024-08-06T23:46:03.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 7.0 and SeaMonkey before 2.4 do not properly restrict availability of motion data events, which makes it easier for remote attackers to read keystrokes by leveraging JavaScript code running in a background tab. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2011/mfsa2011-45.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13954 - https://bugzilla.mozilla.org/show_bug.cgi?id=682562 - http://www.usenix.o
finition/oval%3Aorg.mitre.oval%3Adef%3A13954 - https://bugzilla.mozilla.org/show_bug.cgi?id=682562 - http://www.usenix.org/events/hotsec11/tech/tech.html#Cai
CVE ID: CVE-2011-3867 State: REJECTED Published: 2011-09-29T00:00:00 Last Updated: 2011-10-01T09:00:00 Description: No description available.
CVE ID: CVE-2011-3868 State: PUBLISHED Published: 2011-10-07T20:00:00 Last Updated: 2024-08-06T23:53:31.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5, VMware Fusion 3.1.x before 3.1.3, and VMware AMS allows remote attackers to execute arbitrary code via a crafted UDF filesystem in an ISO image. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46241 - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://www.securityfocus.com/bid/49942 - http://www.securitytracker.com/id?1026139 - http://www.vmware.com/security/advisories/VMSA-2011-0011.h
s.com/bid/49942 - http://www.securitytracker.com/id?1026139 - http://www.vmware.com/security/advisories/VMSA-2011-0011.html - http://osvdb.org/76060 - http://www.securityfocus.com/archive/1/520005/100/0/threaded
CVE ID: CVE-2011-3869 State: PUBLISHED Published: 2011-10-27T20:00:00 Last Updated: 2024-08-06T23:53:31.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to overwrite arbitrary files via a symlink attack on the .k5login file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068061.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068093.html - http://www.debian.org/security/2011/dsa-2314 - http://secunia.com/advisories/46458 - http://lists.fedoraproject.org/pipermail/package-announce/2011
ity/2011/dsa-2314 - http://secunia.com/advisories/46458 - http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068053.html - http://groups.google.com/group/puppet-announce/browse_thread/thread/91e3b46d2328a1cb - http://www.ubuntu.com/usn/USN-1223-1 - http://www.ubuntu.com/usn/USN-1223-2 - https://puppet.com/security/cve/cve-2011-3869
CVE ID: CVE-2011-3870 State: PUBLISHED Published: 2011-10-27T20:00:00 Last Updated: 2024-08-06T23:53:31.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to modify the permissions of arbitrary files via a symlink attack on the SSH authorized_keys file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068061.html - https://puppet.com/security/cve/cve-2011-3870 - http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068093.html - http://www.debian.org/security/2011/dsa-2314 - http://secunia.com/adviso
ail/package-announce/2011-October/068093.html - http://www.debian.org/security/2011/dsa-2314 - http://secunia.com/advisories/46458 - http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068053.html - http://groups.google.com/group/puppet-announce/browse_thread/thread/91e3b46d2328a1cb - http://www.ubuntu.com/usn/USN-1223-1 - http://www.ubuntu.com/usn/USN-1223-2
CVE ID: CVE-2011-3871 State: PUBLISHED Published: 2011-10-27T20:00:00 Last Updated: 2024-08-06T23:53:31.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x, when running in --edit mode, uses a predictable file name, which allows local users to run arbitrary Puppet code or trick a user into editing arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068061.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068093.html - http://www.debian.org/security/2011/dsa-2314 - http://secunia.com/advisories/4
ckage-announce/2011-October/068093.html - http://www.debian.org/security/2011/dsa-2314 - http://secunia.com/advisories/46458 - https://puppet.com/security/cve/cve-2011-3871 - http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068053.html - http://groups.google.com/group/puppet-announce/browse_thread/thread/91e3b46d2328a1cb - http://www.ubuntu.com/usn/USN-1223-1 - http://www.ubuntu.com/usn/USN-1223-2
CVE ID: CVE-2011-3872 State: PUBLISHED Published: 2011-10-27T20:00:00 Last Updated: 2024-08-06T23:53:31.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet 2.6.x before 2.6.12 and 2.7.x before 2.7.6, and Puppet Enterprise (PE) Users 1.0, 1.1, and 1.2 before 1.2.4, when signing an agent certificate, adds the Puppet master's certdnsnames values to the X.509 Subject Alternative Name field of the certificate, which allows remote attackers to spoof a Puppet master via a man-in-the-middle (MITM) attack against an agent that uses an alternate DNS name for the master, aka "AltNames Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/
ster, aka "AltNames Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46550 - http://www.ubuntu.com/usn/USN-1238-2 - http://puppetlabs.com/blog/important-security-announcement-altnames-vulnerability/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/70970 - http://secunia.com/advisories/46578 - https://puppet.com/security/cve/cve-2011-3872 - http://secunia.com/advisories/46934 - http://groups.google.com/group/puppet-announce/browse_thread/thread/e7edc3a71348f3e1 - http://www.securityfocus.com/bid/50356 - http://secunia.com/advisories/46964 - http://www.ubuntu.com/usn/USN-1238-1
CVE ID: CVE-2011-3873 State: PUBLISHED Published: 2011-10-04T20:00:00 Last Updated: 2024-08-06T23:53:31.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 14.0.835.202 does not properly implement shader translation, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=98089 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14537 - http://osvdb.org/76067 - http://googlechromereleases.blogspot.com/2011/10/stable-channel-update.html
CVE ID: CVE-2011-3874 State: PUBLISHED Published: 2012-01-27T15:00:00Z Last Updated: 2024-09-17T04:20:10.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in libsysutils in Android 2.2.x through 2.2.2 and 2.3.x through 2.3.6 allows user-assisted remote attackers to execute arbitrary code via an application that calls the FrameworkListener::dispatchCommand method with the wrong number of arguments, as demonstrated by zergRush to trigger a use-after-free error. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/11/08/3 - https://github.com/revolutionary/zergRush/blob/master/zergRush.c - http
w.openwall.com/lists/oss-security/2011/11/08/3 - https://github.com/revolutionary/zergRush/blob/master/zergRush.c - http://www.openwall.com/lists/oss-security/2011/11/10/1 - http://code.google.com/p/android/issues/detail?id=21681 - http://www.openwall.com/lists/oss-security/2011/11/08/4
CVE ID: CVE-2011-3875 State: PUBLISHED Published: 2011-10-25T19:00:00 Last Updated: 2024-08-06T23:53:31.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 15.0.874.102 does not properly handle drag and drop operations on URL strings, which allows user-assisted remote attackers to spoof the URL bar via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=88949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70953 - http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%
com/2011/10/chrome-stable-release.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12275
CVE ID: CVE-2011-3876 State: PUBLISHED Published: 2011-10-25T19:00:00 Last Updated: 2024-08-06T23:53:31.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 15.0.874.102 does not properly handle downloading files that have whitespace characters at the end of a filename, which has unspecified impact and user-assisted remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70954 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13042 - http://code.google.com/p/chromium/issues/detail?id=90217 - http://googlechromereleases.blogspot.com/2011/1
def%3A13042 - http://code.google.com/p/chromium/issues/detail?id=90217 - http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html
CVE ID: CVE-2011-3877 State: PUBLISHED Published: 2011-10-25T19:00:00 Last Updated: 2024-08-06T23:53:31.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the appcache internals page in Google Chrome before 15.0.874.102 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12763 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70955 - http://code.google.com/p/chromium/issues/detail?id=91218 - http://googlechromereleases.blogspot.com/2011/10/chrome
955 - http://code.google.com/p/chromium/issues/detail?id=91218 - http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html
CVE ID: CVE-2011-3878 State: PUBLISHED Published: 2011-10-25T19:00:00 Last Updated: 2024-08-06T23:53:31.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to worker process initialization. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12811 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70956 - http://code.google.com/p/chromium/issues/detail?id=94487 - http://googlechromereleases.blogspot.com/2011/10/ch
s/70956 - http://code.google.com/p/chromium/issues/detail?id=94487 - http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html
CVE ID: CVE-2011-3879 State: PUBLISHED Published: 2011-10-25T19:00:00 Last Updated: 2024-08-06T23:53:32.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 15.0.874.102 does not prevent redirects to chrome: URLs, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13246 - http://code.google.com/p/chromium/issues/detail?id=95374 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70957 - http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html
CVE ID: CVE-2011-3880 State: PUBLISHED Published: 2011-10-25T19:00:00 Last Updated: 2024-08-06T23:53:31.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 15.0.874.102 does not prevent use of an unspecified special character as a delimiter in HTTP headers, which has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70958 - http://code.google.com/p/chromium/issues/detail?id=95992 - http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html
CVE ID: CVE-2011-3881 State: PUBLISHED Published: 2011-10-25T19:00:00 Last Updated: 2024-08-06T23:53:31.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Google Chrome before 15.0.874.102 and Android before 4.4, allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS (UXSS) attacks via vectors related to (1) the DOMWindow::clear function and use of a selection object, (2) the Object::GetRealNamedPropertyInPrototypeChain function and use of an __proto__ property, (3) the HTMLPlugInImageElement::allowedToLoadFrameURL function and use of a javascript: URL, (4) incorrect origins for XSLT-generated documents in the XSLTProcessor::createD
function and use of a javascript: URL, (4) incorrect origins for XSLT-generated documents in the XSLTProcessor::createDocumentFromSource function, and (5) improper handling of synchronous frame loads in the ScriptController::executeIfJavaScriptURL function. Additional Analyst Notes: - CVE Program Container: References: - http://www.rafayhackingarticles.net/2014/10/a-tale-of-another-sop-bypass-in-android.html - http://code.google.com/p/chromium/issues/detail?id=98053 - http://code.google.com/p/chromium/issues/detail?id=96885 - http://code.google.com/p/chromium/issues/detail?id=96047 - http://www.securitytracker.com/id?1026774 - http://secunia.com/advisories/48377 - http://code.google.com/p/c
?id=96047 - http://www.securitytracker.com/id?1026774 - http://secunia.com/advisories/48377 - http://code.google.com/p/chromium/issues/detail?id=99750 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70959 - https://android.googlesource.com/platform/external/webkit/+/109d59bf6fe4abfd001fc60ddd403f1046b117ef - http://code.google.com/p/chromium/issues/detail?id=99512 - http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12940 - http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html - http://secunia.com/advisories/48288 - http://lists.apple.com/archives/securi
ot.com/2011/10/chrome-stable-release.html - http://secunia.com/advisories/48288 - http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html
CVE ID: CVE-2011-3882 State: PUBLISHED Published: 2011-10-25T19:00:00 Last Updated: 2024-08-06T23:53:31.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to media buffers. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70960 - http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html - http://code.google.com/p/chromium/
70960 - http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html - http://code.google.com/p/chromium/issues/detail?id=96292
CVE ID: CVE-2011-3883 State: PUBLISHED Published: 2011-10-25T19:00:00 Last Updated: 2024-08-06T23:53:31.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to counters. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=96902 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70961 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13091 - http://googlechromereleases.blogspot.com/2011/10/chrome-st
itory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13091 - http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html
CVE ID: CVE-2011-3884 State: PUBLISHED Published: 2011-10-25T19:00:00 Last Updated: 2024-08-06T23:53:31.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 15.0.874.102 does not properly address timing issues during DOM traversal, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=97148 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70962 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13196 - http://googlechromereleases.blo
//oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13196 - http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html
CVE ID: CVE-2011-3885 State: PUBLISHED Published: 2011-10-25T19:00:00 Last Updated: 2024-08-06T23:53:31.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to stale Cascading Style Sheets (CSS) token-sequence data. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73804 - http://code.google.com/p/chromium/issues/detail?id=99294 - http://www.securitytracker.com/id?1026774 - http://secunia.com/advisories/48377 - http://code.google.com/p/
l?id=99294 - http://www.securitytracker.com/id?1026774 - http://secunia.com/advisories/48377 - http://code.google.com/p/chromium/issues/detail?id=98064 - http://code.google.com/p/chromium/issues/detail?id=99880 - http://code.google.com/p/chromium/issues/detail?id=97599 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70963 - http://code.google.com/p/chromium/issues/detail?id=98556 - http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html - http://code.google.com/p/chromium/issues/detail?id=100059 - http://secunia.com/advisories/48274 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13216 - http://googlechromereleases.blogspot.com
security.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13216 - http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html - http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html - http://secunia.com/advisories/48288 - http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html
CVE ID: CVE-2011-3886 State: PUBLISHED Published: 2011-10-25T19:00:00 Last Updated: 2024-08-06T23:53:31.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google V8, as used in Google Chrome before 15.0.874.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers out-of-bounds write operations. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13201 - http://code.google.com/p/chromium/issues/detail?id=98773 - http://code.google.com/p/chromium/issues/detail?id=99167 - https://exchange.xforce.ibmc
hromium/issues/detail?id=98773 - http://code.google.com/p/chromium/issues/detail?id=99167 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70964 - http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html
CVE ID: CVE-2011-3887 State: PUBLISHED Published: 2011-10-25T19:00:00 Last Updated: 2024-08-06T23:53:31.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 15.0.874.102 does not properly handle javascript: URLs, which allows remote attackers to bypass intended access restrictions and read cookies via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70965 - http://www.securitytracker.com/id?1026774 - http://secunia.com/advisories/48377 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13179 - http://code.google.com/p/chromium/issues/
ecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13179 - http://code.google.com/p/chromium/issues/detail?id=98407 - http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html - http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html - http://secunia.com/advisories/48288 - http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html