Approved changes feed: RSS · Atom
cpe:2.3:a:google:gears:0.2:*:*:*:*:*:*:*
part: a version: 0.2 update: *
| Vendor | Google (f181d1eb-7269-5bae-b76e-e66ceb214562) |
|---|---|
| Product | Gears (6655f13d-cdbf-551c-a1c9-863a19d12edf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/benlilaj/gears |
purl2cpe | 2026-06-01 10:16:36.700636 |
pkg:github/edrikl/gears |
purl2cpe | 2026-06-01 10:16:36.700639 |
pkg:github/zied-ellouze/gears |
purl2cpe | 2026-06-01 10:16:36.700640 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-6512 |
vulnerable | 2026-06-08 04:50:55.240452 |
Details available
Cross-domain vulnerability in the WorkerPool API in Google Gears before 0.5.4.2 allows remote attackers to bypass the Same Origin Policy and the intended access restrictions of the allowCrossOrigin function by hosting an assumed-safe file type containing Google Gear commands on the target domain, then accessing that file from the attacking domain, whose response headers are not checked and cause the worker code to run in the target domain.
Published: 2009-03-24T14:00:00.000Z
Updated: 2024-08-07T11:34:46.384Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.