CVE-2012-2893 – libxslt: Heap-double-free in xmlFreeNodeList
https://notcve.org/view.php?id=CVE-2012-2893
26 Sep 2012 — Double free vulnerability in libxslt, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XSL transforms. Vulnerabilidad de doble liberación en libxslt en Google Chrome anterior a 22.0.1229.79, permite a atacantes remotos provocar una denegación de servicio u otro tipo de impacto a través de vectores relacionados con las transformaciones XSL. • http://git.chromium.org/gitweb/?p=chromium.git%3Ba=commit%3Bh=9a5da8e7d4b6f3454614b0331a51bf29c966f556 • CWE-399: Resource Management Errors •
CVE-2012-2895
https://notcve.org/view.php?id=CVE-2012-2895
26 Sep 2012 — The PDF functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger out-of-bounds write operations. La funcionalidad PDF en Google Chrome anterior a v22.0.1229.79, permite a atacantes remotos provocar una denegación de servicio y posiblemente causar otro impacto a través de vectores que lanzan operaciones de escritura fuera de rango. • http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2012-2896
https://notcve.org/view.php?id=CVE-2012-2896
26 Sep 2012 — Integer overflow in the WebGL implementation in Google Chrome before 22.0.1229.79 on Mac OS X allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Vulnerabilidad de desbordamiento de entero en la implementación WebGL en Google Chrome antes de v22.0.1229.79 en Mac OS X, permite a atacantes remotos causar una denegación de servicio o posiblemente tener otro impacto no especificado a través de vectores desconocidos. • http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html • CWE-189: Numeric Errors •
CVE-2012-2897
https://notcve.org/view.php?id=CVE-2012-2897
26 Sep 2012 — The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT, as used by Google Chrome before 22.0.1229.79 and other programs, do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted TrueType font file, aka "Windows Font Parsing Vulnerability" or "TrueType Font Parsing Vulnerability." Los controlado... • http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2012-2874
https://notcve.org/view.php?id=CVE-2012-2874
26 Sep 2012 — Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation, a different vulnerability than CVE-2012-2883. Skia usado en Google Chrome anterior a v22.0.1229.79, permite a atacantes remotos provocar una denegación de servicio u otro tipo de impacto a través de vectores que provocan una operación de escritura fuera de rango. Vulnerabilidad distinta de CVE-2012-2883. • http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2012-2875
https://notcve.org/view.php?id=CVE-2012-2875
26 Sep 2012 — Multiple unspecified vulnerabilities in the PDF functionality in Google Chrome before 22.0.1229.79 allow remote attackers to have an unknown impact via a crafted document. Múltiples vulnerabilidades no determinadas en la funcionalidad PDF en Google Chrome anteriores a 22.0.1229.79 permite a atacantes remotos tener un impacto no determinado a través de un documento manipulado. • http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html •
CVE-2012-2876
https://notcve.org/view.php?id=CVE-2012-2876
26 Sep 2012 — Buffer overflow in the SSE2 optimization functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Vulnerabilidad de desbordamiento de búfer en la optimización de la funcionalidad SSE2 en Google Chrome anterior a v22.0.1229.79, permite a atacantes remotos provocar una denegación de servicio u otro tipo de impacto a través de vectores desconocidos. • http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2012-2877
https://notcve.org/view.php?id=CVE-2012-2877
26 Sep 2012 — The extension system in Google Chrome before 22.0.1229.79 does not properly handle modal dialogs, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors. La extensión System en Google Chrome anterior a v22.0.1229.79 no gestiona de forma adecuada los diálogos de modo, lo que permite a atacantes remotos a provocar una denegación de servicio (caída de la aplicación) a través de vectores no especificados. • http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html • CWE-20: Improper Input Validation •
CVE-2012-2878
https://notcve.org/view.php?id=CVE-2012-2878
26 Sep 2012 — Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to plug-in handling. Vulnerabilidad de liberación después del uso en Google Chrome anterior a v22.0.1229.79, permite a atacantes remotos provocar una denegación de servicio u otro tipo de impacto a través de vectores relativos al manejo de plugins. • http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html • CWE-399: Resource Management Errors •
CVE-2012-2879
https://notcve.org/view.php?id=CVE-2012-2879
26 Sep 2012 — Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service (DOM topology corruption) via a crafted document. Google Chrome anterior a v22.1229.79 permite a a atacantes remotos provocar una denegación de servicio (corrupción de topología DOM) a través de un documento manipulado. • http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •