CVSS: 10.0EPSS: 1%CPEs: 2EXPL: 0CVE-2011-2806
https://notcve.org/view.php?id=CVE-2011-2806
Google Chrome before 13.0.782.215 on Windows does not properly handle vertex data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Google Chrome antes de v13.0.782.215 en Windows no trata correctamente los datos de los vértices, lo cual permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria ) a través de vectores no especificados. • http://code.google.com/p/chromium/issues/detail?id=89836 http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14608 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 3%CPEs: 4EXPL: 0CVE-2011-2823
https://notcve.org/view.php?id=CVE-2011-2823
Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a line box. Vulnerabilidad de uso después de la liberación en Google Chrome v13.0.782.215, permite a atacantes remotos producir una denegación de servicio (caída de aplicación) o posiblemente ejecutar código arbitrario mediante vectores relacionados con los "line box" • http://code.google.com/p/chromium/issues/detail?id=82552 http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html http://support.apple.com/kb/HT4981 http://support.apple.com/kb/HT4999 http://support.apple.com/kb/HT5000 https://oval • CWE-416: Use After Free •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2011-2826
https://notcve.org/view.php?id=CVE-2011-2826
Google Chrome before 13.0.782.215 allows remote attackers to bypass the Same Origin Policy via vectors related to empty origins. Google Chrome anterior a v13.0.782.215 permite a atacantes remotos evitar la Same Origin Policy a través de vectores relacionado con origen vacío. • http://code.google.com/p/chromium/issues/detail?id=89453 http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14383 •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2011-2839
https://notcve.org/view.php?id=CVE-2011-2839
The PDF implementation in Google Chrome before 13.0.782.215 on Linux does not properly use the memset library function, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. La implementación de PDF en Google Chrome antes de v13.0.782.215 en Linux no usa adecuadamente la función memset, que permite a atacantes remotos causar una denegación de servicio o posiblemente tener un impacto no especificado a través de vectores desconocidos. • http://code.google.com/p/chromium/issues/detail?id=91665 http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14371 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2011-2829
https://notcve.org/view.php?id=CVE-2011-2829
Integer overflow in Google Chrome before 13.0.782.215 on 32-bit platforms allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving uniform arrays. Desbordamiento de entero en Google Chrome anterior a v13.0.782.215 en plataformas de 32-bit permite a atacantes remotos provocar una denegación de servicio o posiblemente tener otro impacto desconocido a través de vectores que envuelven arrays uniforme. • http://code.google.com/p/chromium/issues/detail?id=91598 http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14516 • CWE-190: Integer Overflow or Wraparound •