> # [$1000] [74675] High Invalid memory access in v8. Credit to Christian 
> Holler.
> http://code.google.com/p/v8/issues/detail?id=1146
> Patch: http://code.google.com/p/v8/source/detail?r=6773

This is CVE-2011-1286

> 
> # [$1000] [74662] High Corruption via re-entrancy of RegExp code. Credit to 
> Christian Holler.
> http://code.google.com/p/v8/issues/detail?id=1108
> Patch: http://code.google.com/p/v8/source/detail?r=6794
>        http://code.google.com/p/v8/source/detail?r=6805
>        http://code.google.com/p/v8/source/detail?r=6837

This is CVE-2011-1285

> 
> # [$1337] [70877] High Same origin policy bypass in v8. Credit to Daniel 
> Divricean.
> I have no info at this moment, could you ask upstream more info? 

This is CVE-2011-1193

> #[$1337] [69187] Medium Cross-origin error message leak. Credit to Daniel 
> Divricean.
> http://code.google.com/p/v8/source/detail?r=6435

This is CVE-2011-1187

Cheers,
Giuseppe.

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to