Eduardo Vela Nava

Researcher fromGoogle Security Team
#21504of 60,452
14.4Total CVSS
Vulnerabilities · 3
Medium
3
PT-2011-3455
2011-06-16
4.3
CVE-2011-1894
Microsoft
Windows Vista
The issue arises from the MHTML protocol handler's improper handling of a MIME format in requests for embedded content in HTML documents. This allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted EMBED element in a web page visited in Internet Explorer.
PT-2010-4621
2010-10-19
5.8
CVE-2010-3178
Mozilla
Firefox
The issue arises from improper handling of certain modal calls made by `javascript:` URLs, specifically when opening a new window and performing cross-domain navigation. This allows remote attackers to bypass the Same Origin Policy via a crafted HTML document.
PT-2010-3090
2010-06-11
4.3
CVE-2010-1394
Microsoft
Windows
A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via vectors involving HTML document fragments.