google chrome os 26.0.1410.25 vulnerabilities and exploits

(subscribe to this query)

Use-after-free vulnerability in the O3D plug-in in Google Chrome OS prior to 26.0.1410.57 allows remote malicious users to cause a denial of service or possibly have unspecified other impact via vectors related to improper management of ownership relationships involving Elements ...

Google Chrome OS prior to 26.0.1410.57 relies on a Pango pango-utils.c read_config implementation that loads the contents of the .pangorc file in the user's home directory, and the file referenced by the PANGO_RC_FILE environment variable, which allows malicious users to byp...

Google Chrome OS prior to 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote malicious users to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability than CVE-2013-2834.

Google Chrome OS prior to 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote malicious users to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability than CVE-2013-2835.

The Buffer::Set function in core/cross/buffer.cc in the O3D plug-in in Google Chrome OS prior to 26.0.1410.57 does not prevent uninitialized data from remaining in a buffer, which might allow remote malicious users to obtain sensitive information via unspecified vectors.

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook