Page 334 of 3351 results (0.020 seconds)

CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 0

CVE-2009-2578

https://notcve.org/view.php?id=CVE-2009-2578

22 Jul 2009 — Google Chrome 2.x through 2.0.172 allows remote attackers to cause a denial of service (application crash) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479. Google Chrome v2.x a 2.0.172 permite a atacantes remotos causar una denegación de servicios (caída de aplicación)a través de un argumento de cadena de caracteres Unicode larga para el método de escritura, siendo un asunto relacionado con CVE-2009-2479. • http://websecurity.com.ua/3338 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.3EPSS: 7%CPEs: 29EXPL: 0

CVE-2009-2555

https://notcve.org/view.php?id=CVE-2009-2555

21 Jul 2009 — Heap-based buffer overflow in src/jsregexp.cc in Google V8 before 1.1.10.14, as used in Google Chrome before 2.0.172.37, allows remote attackers to execute arbitrary code in the Chrome sandbox via a crafted JavaScript regular expression. Desbordamiento de búfer basado en memoria dinámica en src/jsregexp.cc en Google V8 anterior a v1.1.10.14, como el utilizado en Google Chrome anterior a v2.0.172.37, permite a atacantes remotos ejecutar código de su elección en el Chrome sandbox a través de una expresión reg... • http://code.google.com/p/chromium/issues/detail?id=14719 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.3EPSS: 0%CPEs: 28EXPL: 0

CVE-2009-2556

https://notcve.org/view.php?id=CVE-2009-2556

21 Jul 2009 — Google Chrome before 2.0.172.37 allows attackers to leverage renderer access to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger excessive memory allocation. Google Chrome anterior a v2.0.172.37, permite a atacantes remotos el aprovechar el acceso "renderer" para provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente ejecutar código de su elección a través de vectores no espec... • http://googlechromereleases.blogspot.com/2009/07/stable-beta-update-bug-fixes.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 6.1EPSS: 0%CPEs: 16EXPL: 2

CVE-2009-2352 – Google Chrome 0.3.154 - 'JavaScript:' URI in 'Refresh' Header Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2009-2352

07 Jul 2009 — Google Chrome 1.0.154.48 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header, a related issue to CVE-2009-1312. NOTE: it was later reported that 2.0.172.28, 2.0.172.37, and 3.0.193.2 Beta are also affected. Chrome de Google versiones 1.0.154.48 y anteriores, no bloquea los URI javascript: en encabezad... • https://www.exploit-db.com/exploits/33064 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 9.3EPSS: 0%CPEs: 24EXPL: 1

CVE-2009-2121

https://notcve.org/view.php?id=CVE-2009-2121

23 Jun 2009 — Buffer overflow in the browser kernel in Google Chrome before 2.0.172.33 allows remote HTTP servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted response. Desbordamiento de búfer en el núcleo del navegador en Google Chrome en versiones anteriores a la v2.0.172.33 permite a los servidores HTTP remotos causar una denegación de servicio (mediante caida de la aplicación) o posiblemente ejecutar código arbitrario a través de una respuesta HTTP modificada. • http://code.google.com/p/chromium/issues/detail?id=14508 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 6.8EPSS: 0%CPEs: 16EXPL: 0

CVE-2009-2071

https://notcve.org/view.php?id=CVE-2009-2071

15 Jun 2009 — Google Chrome before 1.0.154.53 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request. Google Chrome anteriores a v1.0.154.53 muestra un certificado cacheado para una página de respuesta de CONEXIÓN (1) 4xx o (2) 5xx a tr... • http://code.google.com/p/chromium/issues/detail?id=7338 • CWE-287: Improper Authentication •

CVSS: 7.4EPSS: 0%CPEs: 16EXPL: 0

CVE-2009-2060

https://notcve.org/view.php?id=CVE-2009-2060

15 Jun 2009 — src/net/http/http_transaction_winhttp.cc in Google Chrome before 1.0.154.53 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack. src/net/http/http_transaction_winhttp.cc en Google Chrome anteriores a v1.0.154.53 utiliza una cabecera Host HTTP para determinar el contexto de un documento pr... • http://code.google.com/p/chromium/issues/detail?id=7338 • CWE-287: Improper Authentication •

CVSS: 9.3EPSS: 6%CPEs: 76EXPL: 1

CVE-2009-1690 – kdelibs: KHTML Incorrect handling <head> element content once the <head> element was removed (DoS, ACE)

https://notcve.org/view.php?id=CVE-2009-1690

10 Jun 2009 — Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by setting an unspecified property of an HTML tag that causes child elements to be freed and later accessed when an HTML error occurs, related to "recursion in certain DOM event handlers.... • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=803 • CWE-399: Resource Management Errors •

CVSS: 8.8EPSS: 2%CPEs: 22EXPL: 1

CVE-2009-1442

https://notcve.org/view.php?id=CVE-2009-1442

07 May 2009 — Multiple integer overflows in Skia, as used in Google Chrome 1.x before 1.0.154.64 and 2.x, and possibly Android, might allow remote attackers to execute arbitrary code in the renderer process via a crafted (1) image or (2) canvas. Múltiples desbodamientos de enteros en Skia, utilizado en Google Chrome v1.x anteriores a v1.0.154.64 y v2.x, y posiblemente Android, debería permitir a los atacantes remotos ejecutar arbitrariamente código en el proceso de renderizado a través de (1) imagenes o (2) canvas manipu... • http://code.google.com/p/chromium/issues/detail?id=10736 • CWE-189: Numeric Errors •

CVSS: 9.3EPSS: 0%CPEs: 17EXPL: 1

CVE-2009-1441

https://notcve.org/view.php?id=CVE-2009-1441

07 May 2009 — Heap-based buffer overflow in the ParamTraits::Read function in Google Chrome before 1.0.154.64 allows attackers to leverage renderer access to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to a large bitmap that arrives over the IPC channel. Un desbordamiento de búfer en la región heap de la memoria en la función ParamTraits(SkBitmap)::Read en Chrome de Google anterior a versión 1.0.154.64, permite a los atacantes aprovechar el acceso al rend... • http://code.google.com/p/chromium/issues/detail?id=10869 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •