Browse CVEs

HIGH 10.0 CVE-2011-3092 The regex implementation in Google V8, as used in Google Chrome before 19.0.1084.46, allows remote attackers to cause a denial of service (invalid wr… Chrome after 19.0.1084.45 Fix from $1,9502012-05-16 HIGH 10.0 CVE-2011-3095 The OGG container in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact… Chrome after 19.0.1084.45 Fix from $1,9502012-05-16 MEDIUM 5.0 CVE-2011-3093 Google Chrome before 19.0.1084.46 does not properly handle glyphs, which allows remote attackers to cause a denial of service (out-of-bounds read) vi… Chrome after 19.0.1084.45 Fix from $1,6002012-05-16 MEDIUM 5.0 CVE-2011-3094 Google Chrome before 19.0.1084.46 does not properly handle Tibetan text, which allows remote attackers to cause a denial of service (out-of-bounds re… Chrome after 19.0.1084.45 Fix from $1,6002012-05-16 MEDIUM 5.8 CVE-2011-3964 Google Chrome before 17.0.963.46 does not properly implement the drag-and-drop feature, which makes it easier for remote attackers to spoof the URL b… Chrome 17.0.963.46+ Fix from $1,6002012-02-09 MEDIUM 5.0 CVE-2011-5037 Google V8 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attack… V8 Mitigation only Fix from $1,6002011-12-30 HIGH 9.3 CVE-2011-4783 The IDAPython plugin before 1.5.2.3 in IDA Pro allows user-assisted remote attackers to execute arbitrary code via a crafted IDB file, related to imp… Idapython after 1.5.2 Fix from $1,9502011-12-27 HIGH 7.5 CVE-2011-3880 Google Chrome before 15.0.874.102 does not prevent use of an unspecified special character as a delimiter in HTTP headers, which has unknown impact a… Chrome 15.0.874.102+ Fix from $1,9502011-10-25 MEDIUM 6.8 CVE-2011-3884 Google Chrome before 15.0.874.102 does not properly address timing issues during DOM traversal, which allows remote attackers to cause a denial of se… Chrome 15.0.874.102+ Fix from $1,6002011-10-25 MEDIUM 6.8 CVE-2011-3886 Google V8, as used in Google Chrome before 15.0.874.102, allows remote attackers to cause a denial of service or possibly have unspecified other impa… V8 Mitigation only Fix from $1,6002011-10-25 MEDIUM 6.8 CVE-2011-2861 Google Chrome before 14.0.835.163 does not properly handle strings in PDF documents, which allows remote attackers to have an unspecified impact via … Chrome 14.0.835.163+ Fix from $1,6002011-09-19 HIGH 7.5 CVE-2011-2838 Google Chrome before 14.0.835.163 does not properly consider the MIME type during the loading of a plug-in, which has unspecified impact and remote a… Chrome 14.0.835.163+ Fix from $1,9502011-09-19 HIGH 7.5 CVE-2011-2842 The installer in Google Chrome before 14.0.835.163 on Mac OS X does not properly handle lock files, which has unspecified impact and attack vectors. Chrome 14.0.835.163+ Fix from $1,9502011-09-19 MEDIUM 6.8 CVE-2011-2841 Google Chrome before 14.0.835.163 does not properly perform garbage collection during the processing of PDF documents, which allows remote attackers … Chrome 14.0.835.163+ Fix from $1,6002011-09-19 HIGH 10.0 CVE-2011-2822 Google Chrome before 13.0.782.215 on Windows does not properly parse URLs located on the command line, which has unspecified impact and attack vector… Chrome 13.0.782.215+ Fix from $1,9502011-08-29 HIGH 7.5 CVE-2011-2839 The PDF implementation in Google Chrome before 13.0.782.215 on Linux does not properly use the memset library function, which allows remote attackers… Chrome 13.0.782.215+ Fix from $1,9502011-08-29 MEDIUM 6.8 CVE-2011-2802 Google V8, as used in Google Chrome before 13.0.782.107, does not properly perform const lookups, which allows remote attackers to cause a denial of … Chrome 13.0.782.107+ Fix from $1,6002011-08-03 MEDIUM 6.8 CVE-2011-2358 Google Chrome before 13.0.782.107 does not ensure that extension installations are confirmed by a browser dialog, which makes it easier for remote at… Chrome 13.0.782.107+ Fix from $1,6002011-08-03 MEDIUM 6.8 CVE-2011-2359 Google Chrome before 13.0.782.107 does not properly track line boxes during rendering, which allows remote attackers to cause a denial of service or … Chrome 5.0 / 5.1.1+ Fix from $1,6002011-08-03 MEDIUM 6.8 CVE-2011-2783 Google Chrome before 13.0.782.107 does not ensure that developer-mode NPAPI extension installations are confirmed by a browser dialog, which makes it… Chrome 13.0.782.107+ Fix from $1,6002011-08-03 HIGH 7.5 CVE-2011-2332 Google V8, as used in Google Chrome before 12.0.742.91, allows remote attackers to bypass the Same Origin Policy via unspecified vectors. Chrome 12.0.742.91+ Fix from $1,9502011-06-09 MEDIUM 6.8 CVE-2011-1813 Google Chrome before 12.0.742.91 does not properly implement the framework for extensions, which allows remote attackers to cause a denial of service… Chrome 12.0.742.91+ Fix from $1,6002011-06-09 HIGH 7.5 CVE-2011-1804 rendering/RenderBox.cpp in WebCore in WebKit before r86862, as used in Google Chrome before 11.0.696.71, does not properly render floats, which allow… Chrome 11.0.696.71+ Fix from $1,9502011-05-26 MEDIUM 6.8 CVE-2011-1456 Google Chrome before 11.0.696.57 does not properly handle PDF forms, which allows remote attackers to cause a denial of service or possibly have unsp… Chrome 11.0.696.57+ Fix from $1,6002011-05-03 HIGH 7.5 CVE-2011-1303 Google Chrome before 11.0.696.57 does not properly handle floating objects, which allows remote attackers to cause a denial of service or possibly ha… Chrome 11.0.696.57+ Fix from $1,9502011-05-03 HIGH 7.5 CVE-2011-1438 Google Chrome before 11.0.696.57 allows remote attackers to bypass the Same Origin Policy via vectors involving blobs. Chrome 11.0.696.57+ Fix from $1,9502011-05-03 HIGH 7.5 CVE-2011-1451 Google Chrome before 11.0.696.57 does not properly handle DOM id maps, which allows remote attackers to cause a denial of service or possibly have un… Chrome 5.0 / 5.0.6+ Fix from $1,9502011-05-03 MEDIUM 6.8 CVE-2011-1434 Google Chrome before 11.0.696.57 does not ensure thread safety during handling of MIME data, which allows remote attackers to cause a denial of servi… Chrome 11.0.696.57+ Fix from $1,6002011-05-03 MEDIUM 6.8 CVE-2011-1442 Google Chrome before 11.0.696.57 does not properly handle mutation events, which allows remote attackers to cause a denial of service (node tree corr… Chrome 11.0.696.57+ Fix from $1,6002011-05-03 MEDIUM 6.8 CVE-2011-1443 Google Chrome before 11.0.696.57 does not properly implement layering, which allows remote attackers to cause a denial of service or possibly have un… Chrome 11.0.696.57+ Fix from $1,6002011-05-03