CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2011-2358
https://notcve.org/view.php?id=CVE-2011-2358
Google Chrome before 13.0.782.107 does not ensure that extension installations are confirmed by a browser dialog, which makes it easier for remote attackers to modify the product's functionality via a Trojan horse extension. Google Chrome en versiones anteriores a la 13.0.782.107 no se asegura de que las instalaciones de extensiones son confirmadas por una ventana de diálogo, lo que facilita a atacantes remotos modificar la funcionalidad de una producto a través de una extensión maliciosa que contiene un troyano. • http://code.google.com/p/chromium/issues/detail?id=75821 http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html http://osvdb.org/74228 https://exchange.xforce.ibmcloud.com/vulnerabilities/68940 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14425 • CWE-20: Improper Input Validation •
CVSS: 6.8EPSS: 4%CPEs: 4EXPL: 0CVE-2011-2792
https://notcve.org/view.php?id=CVE-2011-2792
Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to float removal. Vulnerabilidad de uso después de liberación en Google Chrome antes de v13.0.782.107 permite a atacantes remotos causar una denegación de servicio o posiblemente tener un impacto no especificado a través de vectores relacionados con la eliminación de flotación. • http://code.google.com/p/chromium/issues/detail?id=87148 http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html http://osvdb.org/74242 http://support.apple.com/kb/HT4981 http://support.apple.com/kb/HT4999 http://support.apple.com/kb • CWE-416: Use After Free •
CVSS: 4.3EPSS: 1%CPEs: 1EXPL: 0CVE-2011-2804
https://notcve.org/view.php?id=CVE-2011-2804
Google Chrome before 13.0.782.107 does not properly handle nested functions in PDF documents, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted document. Google Chrome anterior a v13.0.782.107 no maneja adecuadamente funciones anidades en documentos PDF, lo que permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o posiblmente tener otro impacto no especificado a través de documentos manipulados. • http://code.google.com/p/chromium/issues/detail?id=89142 http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html http://osvdb.org/74256 https://exchange.xforce.ibmcloud.com/vulnerabilities/68966 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14448 • CWE-20: Improper Input Validation •
CVSS: 6.8EPSS: 4%CPEs: 4EXPL: 0CVE-2011-2790
https://notcve.org/view.php?id=CVE-2011-2790
Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving floating styles. Vulnerabilidad de uso después de liberación en Google Chrome anterior a v13.0.782.107 permite a atacantes remotos provocar una denegación de servicio o posiblemente tener otro impacto no especificado a través de vectores que involucran estilos flotantes. • http://code.google.com/p/chromium/issues/detail?id=86502 http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html http://osvdb.org/74240 http://support.apple.com/kb/HT4981 http://support.apple.com/kb/HT4999 http://support.apple.com/kb • CWE-416: Use After Free •
CVSS: 6.8EPSS: 1%CPEs: 1EXPL: 0CVE-2011-2791
https://notcve.org/view.php?id=CVE-2011-2791
The International Components for Unicode (ICU) functionality in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write. La funcionalidad "International Components for Unicode" (ICU) en Google Chrome en versiones anteriores a la 13.0.782.107 permite a atacantes remotos provocar una denegación de servicio o tener otro impacto sin especificar a través de vectores desconocidos que provocan una lectura fuera de límites. • http://code.google.com/p/chromium/issues/detail?id=86900 http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html http://osvdb.org/74241 https://exchange.xforce.ibmcloud.com/vulnerabilities/68953 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14179 • CWE-787: Out-of-bounds Write •