CVSS: 9.8EPSS: 0%CPEs: 97EXPL: 0CVE-2013-6655 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-6655
24 Feb 2014 — Use-after-free vulnerability in Blink, as used in Google Chrome before 33.0.1750.117, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper handling of overflowchanged DOM events during interaction between JavaScript and layout. Vulnerabilidad de uso después de liberación en Blink, tal y como se usa en Google Chrome anterior a 33.0.1750.117, permite a atacantes remotos causar una denegación de servicio o posiblemente otro impacto no es... • http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html • CWE-399: Resource Management Errors •
CVSS: 9.8EPSS: 0%CPEs: 98EXPL: 0CVE-2013-6652 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-6652
24 Feb 2014 — Directory traversal vulnerability in sandbox/win/src/named_pipe_dispatcher.cc in Google Chrome before 33.0.1750.117 on Windows allows attackers to bypass intended named-pipe policy restrictions in the sandbox via vectors related to (1) lack of checks for .. (dot dot) sequences or (2) lack of use of the \\?\ protection mechanism. Vulnerabilidad de salto de directorio en sandbox/win/src/named_pipe_dispatcher.cc en Google Chrome anterior a 33.0.1750.117 en Windows permite a atacantes remotos evadir restriccion... • http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 9.8EPSS: 0%CPEs: 97EXPL: 0CVE-2013-6653 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-6653
24 Feb 2014 — Use-after-free vulnerability in the web contents implementation in Google Chrome before 33.0.1750.117 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving attempted conflicting access to the color chooser. Vulnerabilidad de uso después de la liberación en la implementación de contenidos web en Google Chrome anterior a 33.0.1750.117 permite a atacantes remotos causar una denegación de servicio o posiblemente tener otro impacto no especificado a ... • http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html • CWE-399: Resource Management Errors •
CVSS: 9.8EPSS: 3%CPEs: 97EXPL: 0CVE-2013-6658 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-6658
24 Feb 2014 — Multiple use-after-free vulnerabilities in the layout implementation in Blink, as used in Google Chrome before 33.0.1750.117, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving (1) running JavaScript code during execution of the updateWidgetPositions function or (2) making a call into a plugin during execution of the updateWidgetPositions function. Múltiples vulnerabilidades de uso después de liberación en la implementación de diseño en Blink,... • http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html • CWE-399: Resource Management Errors •
CVSS: 7.5EPSS: 0%CPEs: 97EXPL: 0CVE-2013-6659 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-6659
24 Feb 2014 — The SSLClientSocketNSS::Core::OwnAuthCertHandler function in net/socket/ssl_client_socket_nss.cc in Google Chrome before 33.0.1750.117 does not prevent changes to server X.509 certificates during renegotiations, which allows remote SSL servers to trigger use of a new certificate chain, inconsistent with the user's expectations, by initiating a TLS renegotiation. La función SSLClientSocketNSS::Core::OwnAuthCertHandler en net/socket/ssl_client_socket_nss.cc en Google Chrome anterior a 33.0.1750.117 no previen... • http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html • CWE-310: Cryptographic Issues •
CVSS: 9.8EPSS: 0%CPEs: 97EXPL: 0CVE-2013-6654 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-6654
24 Feb 2014 — The SVGAnimateElement::calculateAnimatedValue function in core/svg/SVGAnimateElement.cpp in Blink, as used in Google Chrome before 33.0.1750.117, does not properly handle unexpected data types, which allows remote attackers to cause a denial of service (incorrect cast) or possibly have unspecified other impact via unknown vectors. La función SVGAnimateElement::calculateAnimatedValue en core/svg/SVGAnimateElement.cpp en Blink, tal y como se usa en Google Chrome anterior a 33.0.1750.117, no maneja debidamente... • http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html • CWE-20: Improper Input Validation •
CVSS: 6.4EPSS: 0%CPEs: 97EXPL: 0CVE-2013-6657 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-6657
24 Feb 2014 — core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, inserts the about:blank URL during certain blocking of FORM elements within HTTP requests, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors. core/html/parser/XSSAuditor.cpp en el auditor XSS en Blink, tal y como se usa en Google Chrome anterior a 33.0.1750.117, inserta la URL about:blank durante cierto bloqueo de elementos FORM den... • http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 6.5EPSS: 0%CPEs: 97EXPL: 0CVE-2013-6660 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2013-6660
24 Feb 2014 — The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows remote attackers to discover full pathnames via a crafted web site. La implementación de arrastrar y soltar en Google Chrome anterior a 33.0.1750.117 no restringe debidamente la información en las estructuras de datos WebDropData, lo que permite a atacantes remotos descubrir nombres de rutas completas a través de un sitio web manipulado. Multiple vuln... • http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 8.1EPSS: 0%CPEs: 1EXPL: 1CVE-2013-6166 – Google Chrome - Cookie Verification Denial of Service
https://notcve.org/view.php?id=CVE-2013-6166
15 Feb 2014 — Google Chrome before 29 sends HTTP Cookie headers without first validating that they have the required character-set restrictions, which allows remote attackers to conduct the equivalent of a persistent Logout CSRF attack via a crafted parameter that forces a web application to set a malformed cookie within an HTTP response. Google Chrome anterior a 29 envía cabeceras HTTP Cookie sin antes validar que tiene las restricciones character-set necesarias, lo que permite a atacantes remotos realizar el equivalent... • https://www.exploit-db.com/exploits/38420 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 10.0EPSS: 0%CPEs: 69EXPL: 0CVE-2014-1681 – Gentoo Linux Security Advisory 201403-01
https://notcve.org/view.php?id=CVE-2014-1681
28 Jan 2014 — Multiple unspecified vulnerabilities in Google Chrome before 32.0.1700.102 have unknown impact and attack vectors, related to 12 "security fixes [that were not] either contributed by external researchers or particularly interesting." Múltiples vulnerabilidades no especificadas en Google Chrome anteriores a 32.0.1700.102 tienen un impacto y vectores de ataque desconocidos, relacionados con 12 "correciones de seguridad (que no lo fueron) de contribuciones externas o de un interés particular" Multiple vulnerab... • http://googlechromereleases.blogspot.com/2014/01/stable-channel-update_27.html •