CVSS: 8.8EPSS: 2%CPEs: 106EXPL: 0CVE-2013-6663 – Apple Security Advisory 2014-09-17-4
https://notcve.org/view.php?id=CVE-2013-6663
05 Mar 2014 — Use-after-free vulnerability in the SVGImage::setContainerSize function in core/svg/graphics/SVGImage.cpp in the SVG implementation in Blink, as used in Google Chrome before 33.0.1750.146, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the resizing of a view. Vulnerabilidad de uso después de liberación en la función SVGImage::setContainerSize en core/svg/graphics/SVGImage.cpp en la implementación SVG en Blink, utilizado en Google Chrome ... • http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html • CWE-399: Resource Management Errors •
CVSS: 8.1EPSS: 0%CPEs: 106EXPL: 0CVE-2013-6666 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-6666
05 Mar 2014 — The PepperFlashRendererHost::OnNavigate function in renderer/pepper/pepper_flash_renderer_host.cc in Google Chrome before 33.0.1750.146 does not verify that all headers are Cross-Origin Resource Sharing (CORS) simple headers before proceeding with a PPB_Flash.Navigate operation, which might allow remote attackers to bypass intended CORS restrictions via an inappropriate header. La función PepperFlashRendererHost::OnNavigate en renderer/pepper/pepper_flash_renderer_host.cc en Google Chrome anterior a 33.0.17... • http://googlechromereleases.blogspot.com/2014/03/stable-channel-update.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 8.8EPSS: 1%CPEs: 145EXPL: 1CVE-2013-6668 – v8: multiple vulnerabilities fixed in Google Chrome version 33.0.1750.146
https://notcve.org/view.php?id=CVE-2013-6668
05 Mar 2014 — Multiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome before 33.0.1750.146, allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Múltiples vulnerabilidades no especificadas en Google V8 anterior a 3.24.35.10, utilizado en Google Chrome anterior a 33.0.1750.146, permiten a atacantes causar una denegación de servicio o posiblemente tener otro impacto a través de vectores desconocidos. A memory corruption vulnerability, which re... • https://github.com/sdneon/CveTest •
CVSS: 8.8EPSS: 0%CPEs: 106EXPL: 0CVE-2013-6665 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-6665
05 Mar 2014 — Heap-based buffer overflow in the ResourceProvider::InitializeSoftware function in cc/resources/resource_provider.cc in Google Chrome before 33.0.1750.146 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large texture size that triggers improper memory allocation in the software renderer. Desbordamiento de buffer basado en memoria dinámica en la función ResourceProvider::InitializeSoftware en cc/resources/resource_provider.cc en Google Chrome anterior a 33... • http://googlechromereleases.blogspot.com/2014/03/stable-channel-update.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 1%CPEs: 106EXPL: 0CVE-2013-6667 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-6667
05 Mar 2014 — Multiple unspecified vulnerabilities in Google Chrome before 33.0.1750.146 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Múltiples vulnerabilidades no especificadas en Google Chrome anterior a 33.0.1750.146 permiten a atacantes causar una denegación de servicio o posiblemente tener otro impacto a través de vectores desconocidos. Multiple vulnerabilities have been reported in Chromium and V8, worst of which may allow execution of arbitrary code. Versions less... • http://googlechromereleases.blogspot.com/2014/03/stable-channel-update.html •
CVSS: 9.8EPSS: 0%CPEs: 97EXPL: 0CVE-2013-6655 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-6655
24 Feb 2014 — Use-after-free vulnerability in Blink, as used in Google Chrome before 33.0.1750.117, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper handling of overflowchanged DOM events during interaction between JavaScript and layout. Vulnerabilidad de uso después de liberación en Blink, tal y como se usa en Google Chrome anterior a 33.0.1750.117, permite a atacantes remotos causar una denegación de servicio o posiblemente otro impacto no es... • http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html • CWE-399: Resource Management Errors •
CVSS: 9.8EPSS: 0%CPEs: 98EXPL: 0CVE-2013-6652 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-6652
24 Feb 2014 — Directory traversal vulnerability in sandbox/win/src/named_pipe_dispatcher.cc in Google Chrome before 33.0.1750.117 on Windows allows attackers to bypass intended named-pipe policy restrictions in the sandbox via vectors related to (1) lack of checks for .. (dot dot) sequences or (2) lack of use of the \\?\ protection mechanism. Vulnerabilidad de salto de directorio en sandbox/win/src/named_pipe_dispatcher.cc en Google Chrome anterior a 33.0.1750.117 en Windows permite a atacantes remotos evadir restriccion... • http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 9.8EPSS: 0%CPEs: 97EXPL: 0CVE-2013-6654 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-6654
24 Feb 2014 — The SVGAnimateElement::calculateAnimatedValue function in core/svg/SVGAnimateElement.cpp in Blink, as used in Google Chrome before 33.0.1750.117, does not properly handle unexpected data types, which allows remote attackers to cause a denial of service (incorrect cast) or possibly have unspecified other impact via unknown vectors. La función SVGAnimateElement::calculateAnimatedValue en core/svg/SVGAnimateElement.cpp en Blink, tal y como se usa en Google Chrome anterior a 33.0.1750.117, no maneja debidamente... • http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html • CWE-20: Improper Input Validation •
CVSS: 6.4EPSS: 0%CPEs: 97EXPL: 0CVE-2013-6657 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-6657
24 Feb 2014 — core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, inserts the about:blank URL during certain blocking of FORM elements within HTTP requests, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors. core/html/parser/XSSAuditor.cpp en el auditor XSS en Blink, tal y como se usa en Google Chrome anterior a 33.0.1750.117, inserta la URL about:blank durante cierto bloqueo de elementos FORM den... • http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 6.5EPSS: 0%CPEs: 97EXPL: 0CVE-2013-6660 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-6660
24 Feb 2014 — The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows remote attackers to discover full pathnames via a crafted web site. La implementación de arrastrar y soltar en Google Chrome anterior a 33.0.1750.117 no restringe debidamente la información en las estructuras de datos WebDropData, lo que permite a atacantes remotos descubrir nombres de rutas completas a través de un sitio web manipulado. Multiple vuln... • http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html • CWE-264: Permissions, Privileges, and Access Controls •