CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2011-2803
https://notcve.org/view.php?id=CVE-2011-2803
Google Chrome before 13.0.782.107 does not properly handle Skia paths, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. Google Chrome anterior a v13.0.782.10, no maneja adecuadamente las rutas Skia, esto permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites), a través de vectores no especificados. • http://code.google.com/p/chromium/issues/detail?id=88827 http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html http://osvdb.org/74254 https://exchange.xforce.ibmcloud.com/vulnerabilities/68965 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14333 • CWE-125: Out-of-bounds Read •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2011-2786
https://notcve.org/view.php?id=CVE-2011-2786
Google Chrome before 13.0.782.107 does not ensure that the speech-input bubble is shown on the product's screen, which might make it easier for remote attackers to make audio recordings via a crafted web page containing an INPUT element. Google Chrome anterior a v13.0.782.107 no asegura que la entrada de expresiones en bubble esé caída en los productos de pantalla, lo que permite hacer más fácil para atacantes remotos hacer grabaciones de audio a través de páginas web manipuladas que contiene un elemento INPUT. • http://code.google.com/p/chromium/issues/detail?id=84600 http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html http://osvdb.org/74236 https://exchange.xforce.ibmcloud.com/vulnerabilities/68948 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14331 • CWE-20: Improper Input Validation •
CVSS: 6.8EPSS: 1%CPEs: 3EXPL: 0CVE-2011-2819
https://notcve.org/view.php?id=CVE-2011-2819
Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy via vectors related to handling of the base URI. Google Chrome anterior a v13.0.782.107 permite a atacantes remotos evitar la política del mismo origen (Same Origin Policy)a través de vectores relacionado con el manejo de la URI. • http://code.google.com/p/chromium/issues/detail?id=90222 http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html http://osvdb.org/74258 http://support.apple.com/kb/HT4999 http://support.apple.com/kb/HT5000 https://exchange.xforce.ibmcloud.com/vulnerabilities/68969 https://oval.cisecurity.org/repository/search/definition •
CVSS: 6.8EPSS: 2%CPEs: 6EXPL: 0CVE-2011-2359
https://notcve.org/view.php?id=CVE-2011-2359
Google Chrome before 13.0.782.107 does not properly track line boxes during rendering, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer." Google Chrome antes de v13.0.782.107 no sigue correctamente cajas de línea durante la búsqueda, lo que permite a atacantes remotos causar una denegación de servicio o posiblemente tener un impacto no especificado a través de vectores desconocidos que conducen a un "puntero viejo". • http://code.google.com/p/chromium/issues/detail?id=78841 http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html http://osvdb.org/74229 http://support.apple.com/kb/HT4981 http://support.apple.com/kb/HT4999 http://support.apple.com/kb • CWE-20: Improper Input Validation •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2011-2795
https://notcve.org/view.php?id=CVE-2011-2795
Google Chrome before 13.0.782.107 does not prevent calls to functions in other frames, which allows remote attackers to bypass intended access restrictions via a crafted web site, related to a "cross-frame function leak." Google Chrome anterior a v13.0.782.107 no previene las llamadas a otras funciones en otros marcos, esto permite a atacantes remotos saltarse las restricciones de acceso pretendidas, mediante un sitio web manipulado. Está relacionado con "fuga en la función cross-frame". • http://code.google.com/p/chromium/issues/detail?id=87339 http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html http://osvdb.org/74245 https://exchange.xforce.ibmcloud.com/vulnerabilities/68957 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14653 •