google chrome os 26.0.1410.6 vulnerabilities and exploits

(subscribe to this query)

Use-after-free vulnerability in the O3D plug-in in Google Chrome OS prior to 26.0.1410.57 allows remote malicious users to cause a denial of service or possibly have unspecified other impact via vectors related to improper management of ownership relationships involving Elements ...

Google Chrome OS prior to 26.0.1410.57 relies on a Pango pango-utils.c read_config implementation that loads the contents of the .pangorc file in the user's home directory, and the file referenced by the PANGO_RC_FILE environment variable, which allows malicious users to byp...

Google Chrome OS prior to 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote malicious users to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability than CVE-2013-2835.

The Buffer::Set function in core/cross/buffer.cc in the O3D plug-in in Google Chrome OS prior to 26.0.1410.57 does not prevent uninitialized data from remaining in a buffer, which might allow remote malicious users to obtain sensitive information via unspecified vectors.

Google Chrome OS prior to 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote malicious users to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability than CVE-2013-2834.

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook