CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2011-2837
https://notcve.org/view.php?id=CVE-2011-2837
Google Chrome before 14.0.835.163 on Linux does not use the PIC and PIE compiler options for position-independent code, which has unspecified impact and attack vectors. Google Chrome en Linux antes de la v14.0.835.163 no utiliza el PIC y las opciones del compilador para PIE para código de posición independiente, que tiene un impacto no especificado y vectores de ataque. • http://code.google.com/p/chromium/issues/detail?id=57908 http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html http://osvdb.org/75538 https://exchange.xforce.ibmcloud.com/vulnerabilities/69864 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14139 •
CVSS: 6.8EPSS: 1%CPEs: 1EXPL: 0CVE-2011-2875
https://notcve.org/view.php?id=CVE-2011-2875
Google V8, as used in Google Chrome before 14.0.835.163, does not properly perform object sealing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion." Google V8, como el usado en Google Chrome antes de la v14.0.835.163, no realiza adecuadamente el sellado de objetos, el cual permite a atacantes remotos causar una denegación de servicio o posiblemente tener un impacto no especificado a través de vectores que aprovechan la "confusión de tipo." (type confusion) • http://code.google.com/p/chromium/issues/detail?id=95920 http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html http://osvdb.org/75554 https://exchange.xforce.ibmcloud.com/vulnerabilities/69893 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14229 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2011-2840
https://notcve.org/view.php?id=CVE-2011-2840
Google Chrome before 14.0.835.163 allows user-assisted remote attackers to spoof the URL bar via vectors related to "unusual user interaction." Google Chrome antes de v14.0.835.163 permite falsificar la barra de URL a atacantes remotos, con la ayuda de usuarios locales, a través de vectores relacionados con "una interacción inusual del usuario". • http://code.google.com/p/chromium/issues/detail?id=78427 http://code.google.com/p/chromium/issues/detail?id=83031 http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html http://osvdb.org/75546 https://exchange.xforce.ibmcloud.com/vulnerabilities/69867 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14491 • CWE-20: Improper Input Validation •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2011-2848
https://notcve.org/view.php?id=CVE-2011-2848
Google Chrome before 14.0.835.163 allows user-assisted remote attackers to spoof the URL bar via vectors related to the forward button. Google Chrome antes de v14.0.835.163 permite falsificar la barra de URL a atacantes remotos, con la ayuda de usuarios locales, a través de vectores relacionados con el botón de avance. • http://code.google.com/p/chromium/issues/detail?id=89564 http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html http://osvdb.org/75548 https://exchange.xforce.ibmcloud.com/vulnerabilities/69874 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13915 • CWE-20: Improper Input Validation •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2011-2861
https://notcve.org/view.php?id=CVE-2011-2861
Google Chrome before 14.0.835.163 does not properly handle strings in PDF documents, which allows remote attackers to have an unspecified impact via a crafted document that triggers an incorrect read operation. Google Chrome antes de v14.0.835.163, maneja adecuadamente las cadenas en documentos PDF, lo que permite a atacantes remotos tener un impacto no especificado a través de un documento modificado que dispara una operación de lectura incorrecta. • http://code.google.com/p/chromium/issues/detail?id=93596 http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html http://osvdb.org/75563 https://exchange.xforce.ibmcloud.com/vulnerabilities/69888 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14677 • CWE-20: Improper Input Validation •