CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2010-3252
https://notcve.org/view.php?id=CVE-2010-3252
Use-after-free vulnerability in the Notifications presenter in Google Chrome before 6.0.472.53 allows attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. La vulnerabilidad "use-after-free" en el presentador de notificaciones en Google Chrome anterior a v6.0.472.53 permite a atacantes provocar una denegación de servicio o posiblemente tenga otro impacto sin especificar a través de vectores desconocidos. • http://code.google.com/p/chromium/issues/detail?id=50386 http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11987 • CWE-416: Use After Free •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2010-3249
https://notcve.org/view.php?id=CVE-2010-3249
Google Chrome before 6.0.472.53 does not properly implement SVG filters, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "stale pointer" issue. Google Chrome anterior a v6.0.472.53 no implementa apropiadamente los filtros SVG, lo que permite a atacantes remotos provocar una denegación de servicio o posiblemente tenga otro impacto sin especificar a través de vectores desconocidos. Relacionado con un problema "stale pointer" • http://code.google.com/p/chromium/issues/detail?id=45659 http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12211 •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 1CVE-2010-3258
https://notcve.org/view.php?id=CVE-2010-3258
The sandbox implementation in Google Chrome before 6.0.472.53 does not properly deserialize parameters, which has unspecified impact and remote attack vectors. La implementación de la "sandbox" (caja de arena) en Google Chrome anterior a v6.0.472.53 no deserializa apropiadamente los parámetros. Esto provoca un impacto y unos vectores de ataque sin especificar. • http://code.google.com/p/chromium/issues/detail?id=52682 http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12133 • CWE-502: Deserialization of Untrusted Data •
CVSS: 9.3EPSS: 2%CPEs: 2EXPL: 0CVE-2010-3255 – webkit: DoS via improper handling of counter nodes
https://notcve.org/view.php?id=CVE-2010-3255
Google Chrome before 6.0.472.53 and webkitgtk before 1.2.6 do not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors. Chrome de Google anterior a versión 6.0.472.53 y webkitgtk anterior a versión 1.2.6, no maneja apropiadamente los nodos contadores, lo que permite a los atacantes remotos causar una denegación de servicio (corrupción de memoria) o posiblemente tener otro impacto no especificado por medio de vectores desconocidos. • http://code.google.com/p/chromium/issues/detail?id=51653 http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html http://secunia.com/advisories/43086 http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 http://www.redhat.com/support/errata/RHSA-2011-0177.html http://www.vupen.com/english/advisories/2011/0216 http://www.vupen.com/english/advisories/2011/0552 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11736&# • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 4%CPEs: 8EXPL: 0CVE-2010-3257 – webkit: stale pointer issue with focusing
https://notcve.org/view.php?id=CVE-2010-3257
Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving element focus. Google Chrome anterior a v6.0.472.53 no realiza apropiadamente el manejo del foco, lo que permite a atacantes remotos causar una denegación de servicio o posiblemente tener otros impactos sin especificar a través de vectores desconocidos. Relacionado con un problema "stale pointer" • http://code.google.com/p/chromium/issues/detail?id=52443 http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html http://secunia.com/advisories/41856 http://secunia.com/advisories/42314 http://secunia.com/advisories/43068 http://secunia&# • CWE-416: Use After Free •