CVSS: 7.5EPSS: 1%CPEs: 54EXPL: 0CVE-2012-5121
https://notcve.org/view.php?id=CVE-2012-5121
Use-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to video layout. Vulnerabilidad de uso después de liberación en Google Chrome antes de v23.0.1271.64, permite a atacantes remotos provocar una denegación de servicio o posiblemente tener un impacto no especificado a través de vectores relacionados con diseño de vídeo. • http://googlechromereleases.blogspot.com/2012/11/stable-channel-release-and-beta-channel.html http://osvdb.org/87073 http://www.securityfocus.com/bid/56413 https://code.google.com/p/chromium/issues/detail?id=154055 https://exchange.xforce.ibmcloud.com/vulnerabilities/79868 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15957 • CWE-416: Use After Free •
CVSS: 7.5EPSS: 1%CPEs: 54EXPL: 0CVE-2012-5127
https://notcve.org/view.php?id=CVE-2012-5127
Integer overflow in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted WebP image. Desbordamiento de entero en Google Chrome antes de v23.0.1271.64 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites) o posiblemente tener un impacto no especificado a través de una imagen WebP manipulada. • http://googlechromereleases.blogspot.com/2012/11/stable-channel-release-and-beta-channel.html http://osvdb.org/87079 http://www.securityfocus.com/bid/56413 https://code.google.com/p/chromium/issues/detail?id=157079 https://exchange.xforce.ibmcloud.com/vulnerabilities/79862 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15943 • CWE-189: Numeric Errors •
CVSS: 7.5EPSS: 0%CPEs: 249EXPL: 0CVE-2012-5120
https://notcve.org/view.php?id=CVE-2012-5120
Google V8 before 3.13.7.5, as used in Google Chrome before 23.0.1271.64, on 64-bit Linux platforms allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds access to an array. Google V8 antes de v3.13.7.5, tal como se utiliza en Google Chrome antes de v23.0.1271.64, en plataformas de 64 bits de Linux, permite a atacantes remotos provocar una denegación de servicio o posiblemente tener un impacto no especificado a través de código JavaScript modificado que desencadena un acceso fuera de límites a una matriz. • http://googlechromereleases.blogspot.com/2012/11/stable-channel-release-and-beta-channel.html http://osvdb.org/87085 http://www.securityfocus.com/bid/56413 https://code.google.com/p/chromium/issues/detail?id=150729 https://exchange.xforce.ibmcloud.com/vulnerabilities/79867 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 1%CPEs: 54EXPL: 0CVE-2012-5122
https://notcve.org/view.php?id=CVE-2012-5122
Google Chrome before 23.0.1271.64 does not properly perform a cast of an unspecified variable during handling of input, which allows remote attackers to cause a denial of service or possibly have other impact via unknown vectors. Google Chrome antes de v23.0.1271.64 no realiza adecuadamente una conversión de una variable no especificada durante la manipulación de entrada, lo que permite a atacantes remotos provocar una denegación de servicio o posiblemente tener otro impacto a través de vectores desconocidos. • http://googlechromereleases.blogspot.com/2012/11/stable-channel-release-and-beta-channel.html http://osvdb.org/87071 http://www.securityfocus.com/bid/56413 https://code.google.com/p/chromium/issues/detail?id=154465 https://exchange.xforce.ibmcloud.com/vulnerabilities/79869 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15695 • CWE-399: Resource Management Errors •
CVSS: 7.5EPSS: 0%CPEs: 54EXPL: 0CVE-2012-5117
https://notcve.org/view.php?id=CVE-2012-5117
Google Chrome before 23.0.1271.64 does not properly restrict the loading of an SVG subresource in the context of an IMG element, which has unspecified impact and remote attack vectors. Google Chrome antes v23.0.1271.64 no restringe correctamente la carga de un subrecurso SVG en el contexto de un elemento IMG, lo que tiene un impacto no especificado y vectores de ataque remotos. • http://googlechromereleases.blogspot.com/2012/11/stable-channel-release-and-beta-channel.html http://osvdb.org/87076 http://www.securityfocus.com/bid/56413 https://code.google.com/p/chromium/issues/detail?id=145915 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15912 • CWE-264: Permissions, Privileges, and Access Controls •