CVSS: 10.0EPSS: 2%CPEs: 1EXPL: 0CVE-2011-3091
https://notcve.org/view.php?id=CVE-2011-3091
Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Vulnerabilidad de uso después de la liberación en la implementación de IndexedDB en Google Chrome anteriores v9.0.1084.46, permite a atacantes remotos producir una denegación de servicio o posiblemente tener otros impactos no especificados a través de vectores desconocidos. • http://code.google.com/p/chromium/issues/detail?id=121734 http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html http://security.gentoo.org/glsa/glsa-201205-03.xml http://www.securityfocus.com/bid/53540 http://www.securitytracker.com/id?1027067 https://exchange.xforce.ibmcloud.com/vulnerabilities/75596 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15196 • CWE-399: Resource Management Errors •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2011-3087
https://notcve.org/view.php?id=CVE-2011-3087
Google Chrome before 19.0.1084.46 does not properly perform window navigation, which has unspecified impact and remote attack vectors. Google Chrome anteriores a v19.0.1084.46 no realiza una navegación en ventana de forma adecuada, lo que tiene un impacto y vectores de ataque no determinados. • http://code.google.com/p/chromium/issues/detail?id=118664 http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html http://security.gentoo.org/glsa/glsa-201205-03.xml http://www.securityfocus.com/bid/53540 http://www.securitytracker.com/id?1027067 https://exchange.xforce.ibmcloud.com/vulnerabilities/75592 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15567 •
CVSS: 5.0EPSS: 1%CPEs: 1EXPL: 0CVE-2011-3093
https://notcve.org/view.php?id=CVE-2011-3093
Google Chrome before 19.0.1084.46 does not properly handle glyphs, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. Google Chrome anterior a v19.0.1084.46 no controla correctamente glyphs, permitiendo a atacantes remotos provocar una denegación de servicio (fuera de los límites de lectura) a través de vectores no especificados. • http://code.google.com/p/chromium/issues/detail?id=122585 http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html http://security.gentoo.org/glsa/glsa-201205-03.xml http://www.securityfocus.com/bid/53540 http://www.securitytracker.com/id?1027067 https://exchange.xforce.ibmcloud.com/vulnerabilities/75598 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15358 • CWE-20: Improper Input Validation •
CVSS: 10.0EPSS: 1%CPEs: 1EXPL: 0CVE-2011-3099
https://notcve.org/view.php?id=CVE-2011-3099
Use-after-free vulnerability in the PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a malformed name for the font encoding. Vulnerabilidad de uso después de la liberación en la funcionalidad PDF en Google Chrome anteriores a v19.0.1084.46, permite a atacantes remotos producir una denegación de servicio o posiblemente tener otros impactos no determinados a través de vectores que implican un nombre incorrecto para la fuente que codifica. • http://code.google.com/p/chromium/issues/detail?id=124479 http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html http://www.securityfocus.com/bid/53540 http://www.securitytracker.com/id?1027067 https://exchange.xforce.ibmcloud.com/vulnerabilities/75604 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15208 • CWE-399: Resource Management Errors •
CVSS: 5.0EPSS: 2%CPEs: 1EXPL: 0CVE-2011-3085
https://notcve.org/view.php?id=CVE-2011-3085
The Autofill feature in Google Chrome before 19.0.1084.46 does not properly restrict field values, which allows remote attackers to cause a denial of service (UI corruption) and possibly conduct spoofing attacks via vectors involving long values. La función Autocompletar en Google Chrome anterior a v19.0.1084.46 no restringe adecuadamente los valores de campo, lo que permite a atacantes remotos causar una denegación de servicio (corrupción de la interfaz de usuario) y, posiblemente, llevar a cabo ataques de spoofing a través de vectores relacionados con los valores de largo. • http://code.google.com/p/chromium/issues/detail?id=118374 http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html http://security.gentoo.org/glsa/glsa-201205-03.xml http://www.securityfocus.com/bid/53540 http://www.securitytracker.com/id?1027067 https://exchange.xforce.ibmcloud.com/vulnerabilities/75590 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15256 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •