deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-3015
Published: 2012-07-26
Description: Untrusted search path vulnerability in Siemens SIMATIC STEP7 before 5.5 SP1, as used in SIMATIC PCS7 7.1 SP3 and earlier and other products, allows local users to gain privileges via a Trojan horse DLL in a STEP7 project folder.
CVSS Score: 6.9 (MEDIUM)
References: http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-110665.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-205-02.pdf; http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-110665.pdf
CVE: CVE-2011-2502
Published: 2012-07-26
Description: runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate modules when a module path is specified by a user for user-space probing, which allows local users in the stapusr group to gain privileges via a crafted module in the search path in the -u argument.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/45377; http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git%3Ba=blob%3Bf=NEWS%3Bhb=304d73b1fea24af791f2a129fb141c5009eae6a8; http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git%3Ba=commitdiff%3Bh=4ecaadf545a729bb3e5f01f6f019716d49815d9a
CVE: CVE-2011-2503
Published: 2012-07-26
Description: The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate a module when loading it, which allows local users to gain privileges via a race condition between the signature validation and the module initialization.
CVSS Score: 3.7 (LOW)
CWE: CWE-20
References: http://secunia.com/advisories/45377; http://secunia.com/advisories/46920; http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git%3Ba=blob%3Bf=NEWS%3Bhb=304d73b1fea24af791f2a129fb141c5009eae6a8
CVE: CVE-2011-4963
Published: 2012-07-26
Description: nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via (1) a trailing . (dot) or (2) certain "$index_allocation" sequences in a request.
CVSS Score: 5.0 (MEDIUM)
References: http://english.securitylab.ru/lab/PT-2012-06; http://mailman.nginx.org/pipermail/nginx-announce/2012/000086.html; http://nginx.org/en/security_advisories.html
CVE: CVE-2012-3698
Published: 2012-07-26
Description: Apple Xcode before 4.4 does not properly compose a designated requirement (DR) during signing of programs that lack bundle identifiers, which allows remote attackers to read keychain entries via a crafted app, as demonstrated by the keychain entries of a (1) helper tool or (2) command-line tool.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Jul/msg00001.html
CVE: CVE-2012-4043
Published: 2012-07-26
Description: Cross-site scripting (XSS) vulnerability in global-protect/login.esp in Palo Alto Networks Global Protect Portal, Global Protect Gateway, and SSL VPN portals 3.1.x through 3.1.11 and 4.0.x through 4.0.5 allows remote attackers to inject arbitrary web script or HTML via the inputStr parameter in a Login action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://blog.abhisek.me/2012/06/xss-on-palo-alto-networks-global.html; http://www.osvdb.org/83896; http://blog.abhisek.me/2012/06/xss-on-palo-alto-networks-global.html
CVE: CVE-2012-4068
Published: 2012-07-26
Description: Heap-based buffer overflow in the SoapServer service in Citrix Provisioning Services 5.0, 5.1, 5.6, 5.6 SP1, 6.0, and 6.1 allows remote attackers to execute arbitrary code via a crafted string associated with date and time data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://osvdb.org/81664; http://support.citrix.com/article/ctx133039; http://www.securitytracker.com/id?1027004
CVE: CVE-2011-2657
Published: 2012-07-26
Description: Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in LaunchHelp.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 allows remote attackers to execute arbitrary commands via a pathname in the first argument.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://www.exploit-db.com/exploits/19718/; http://www.novell.com/support/kb/doc.php?id=7009570; http://www.zerodayinitiative.com/advisories/ZDI-11-318/
CVE: CVE-2011-2658
Published: 2012-07-26
Description: The ISList.ISAvi ActiveX control in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 provides access to the mscomct2.ocx file, which allows remote attackers to execute arbitrary code by leveraging unspecified mscomct2 flaws.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://www.novell.com/support/kb/doc.php?id=7009570; http://www.zerodayinitiative.com/advisories/ZDI-11-317/; http://www.novell.com/support/kb/doc.php?id=7009570
CVE: CVE-2011-3174
Published: 2012-07-26
Description: Buffer overflow in the DoFindReplace function in the ISGrid.Grid2.1 ActiveX control in InstallShield/ISGrid2.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 allows remote attackers to execute arbitrary code via a long bstrReplaceText parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://www.novell.com/support/kb/doc.php?id=7009570; http://www.zerodayinitiative.com/advisories/ZDI-11-319/; http://www.novell.com/support/kb/doc.php?id=7009570
CVE: CVE-2012-3884
Published: 2012-07-26
Description: AirDroid 1.0.4 beta implements authentication through direct transmission of a password hash over HTTP, which makes it easier for remote attackers to obtain access by sniffing the local wireless network and then replaying the authentication data.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html; http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt; http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html
CVE: CVE-2012-3885
Published: 2012-07-26
Description: The default configuration of AirDroid 1.0.4 beta uses a four-character alphanumeric password, which makes it easier for remote attackers to obtain access via a brute-force attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html; http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt; http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html
CVE: CVE-2012-3886
Published: 2012-07-26
Description: AirDroid 1.0.4 beta uses the MD5 algorithm for values in the checklogin key parameter and 7bb cookie, which makes it easier for remote attackers to obtain cleartext data by sniffing the local wireless network and then conducting a (1) brute-force attack or (2) rainbow-table attack.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html; http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt; http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html
CVE: CVE-2012-3887
Published: 2012-07-26
Description: AirDroid before 1.0.7 beta uses a cleartext base64 format for data transfer that is documented as an "Encrypted Transmission" feature, which allows remote attackers to obtain sensitive information by sniffing the local wireless network, as demonstrated by the SMS message content sent to the sdctl/sms/send/single/ URI.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html; http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt; http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html
CVE: CVE-2012-3888
Published: 2012-07-26
Description: The login implementation in AirDroid 1.0.4 beta allows remote attackers to bypass a multiple-login protection mechanism by modifying a pass value within JSON data.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html; http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt; http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html
CVE: CVE-2012-2202
Published: 2012-07-27
Description: Directory traversal vulnerability in javatester_init.php in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and IBM ISS Proventia Network Mail Security System allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the template parameter.
CVSS Score: 3.5 (LOW)
CWE: CWE-22
References: http://secunia.com/advisories/49897; http://www-01.ibm.com/support/docview.wss?uid=swg21605630; http://www.kb.cert.org/vuls/id/659791
CVE: CVE-2012-2978
Published: 2012-07-27
Description: query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via a crafted DNS packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/84097; http://secunia.com/advisories/49795; http://secunia.com/advisories/49997
CVE: CVE-2012-1968
Published: 2012-07-30
Description: Bugzilla 4.1.x and 4.2.x before 4.2.2 and 4.3.x before 4.3.2 uses bug-editor privileges instead of bugmail-recipient privileges during construction of HTML bugmail documents, which allows remote attackers to obtain sensitive description information by reading the tooltip portions of an HTML e-mail message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/50040; http://www.bugzilla.org/security/3.6.9/; https://bugzilla.mozilla.org/show_bug.cgi?id=777398
CVE: CVE-2012-1969
Published: 2012-07-30
Description: The get_attachment_link function in Template.pm in Bugzilla 2.x and 3.x before 3.6.10, 3.7.x and 4.0.x before 4.0.7, 4.1.x and 4.2.x before 4.2.2, and 4.3.x before 4.3.2 does not check whether an attachment is private before presenting the attachment description within a public comment, which allows remote attackers to obtain sensitive description information by reading a comment.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/50040; http://www.bugzilla.org/security/3.6.9/; http://www.mandriva.com/security/advisories?name=MDVSA-2013:066
CVE: CVE-2012-0723
Published: 2012-07-30
Description: The kernel in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly implement the dupmsg system call, which allows local users to cause a denial of service (system crash) via a crafted application.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://aix.software.ibm.com/aix/efixes/security/syscall_advisory.asc; http://www.ibm.com/support/docview.wss?uid=isg1IV22693; http://www.ibm.com/support/docview.wss?uid=isg1IV22694
CVE: CVE-2012-2163
Published: 2012-07-30
Description: IBM Scale Out Network Attached Storage (SONAS) 1.1 through 1.3.1 allows remote authenticated administrators to execute arbitrary Linux commands via the (1) Command Line Interface or (2) Graphical User Interface, related to a "code injection" issue.
CVSS Score: 9.0 (HIGH)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004170; https://exchange.xforce.ibmcloud.com/vulnerabilities/75037; http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004170
CVE: CVE-2012-2962
Published: 2012-07-30
Description: SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2 allows remote authenticated users to execute arbitrary SQL commands via the q parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/50052; http://www.exploit-db.com/exploits/20033; http://www.kb.cert.org/vuls/id/404051
CVE: CVE-2012-2626
Published: 2012-07-31
Description: cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authentication, which allows remote attackers to add administrative accounts via a userprefs action.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html; https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt; http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html
CVE: CVE-2012-2627
Published: 2012-07-31
Description: d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote attackers to create or overwrite arbitrary files in %PROGRAMFILES%\Scrutinizer\snmp\mibs\ via a multipart/form-data POST request.
CVSS Score: 9.4 (HIGH)
References: http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html; https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt; http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html
CVE: CVE-2012-2647
Published: 2012-07-31
Description: Yahoo! Toolbar 1.0.0.5 and earlier for Chrome and Safari allows remote attackers to modify the configured search URL, and intercept search terms, via a crafted web page.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-200
References: http://jvn.jp/en/jp/JVN51769987/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000072; http://jvn.jp/en/jp/JVN51769987/index.html
CVE: CVE-2012-3016
Published: 2012-07-31
Description: Siemens SIMATIC S7-400 PN CPU devices with firmware 6 before 6.0.3 allow remote attackers to cause a denial of service (defect-mode transition and service outage) via crafted ICMP packets.
CVSS Score: 7.8 (HIGH)
References: http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-589272.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-212-02.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-589272.pdf
CVE: CVE-2012-3017
Published: 2012-07-31
Description: Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service (defect-mode transition and service outage) via (1) malformed HTTP traffic or (2) malformed IP packets.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-617264.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-212-02.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-617264.pdf
CVE: CVE-2012-3018
Published: 2012-07-31
Description: The lockout-recovery feature in the Security Configurator component in ICONICS GENESIS32 9.22 and earlier and BizViz 9.22 and earlier uses an improper encryption algorithm for generation of an authentication code, which allows local users to bypass intended access restrictions and obtain administrative access by predicting a challenge response.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-310
References: http://www.us-cert.gov/control_systems/pdf/ICSA-12-212-01.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-212-01.pdf
CVE: CVE-2012-3426
Published: 2012-07-31
Description: OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and OpenStack Essex, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by (1) creating new tokens through token chaining, (2) leveraging possession of a token for a disabled user account, or (3) leveraging possession of a token for an account with a changed password.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://github.com/openstack/keystone/commit/29e74e73a6e51cffc0371b[PII_REDACTED]1826a4aa; http://github.com/openstack/keystone/commit/375838cfceb88cacc312ff6564e64eb18ee6a355; http://github.com/openstack/keystone/commit/628149b3dc6b58b91fd08e6ca8d91c728ccb8626
CVE: CVE-2012-3848
Published: 2012-07-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to d4d/exporters.php, (2) the HTTP Referer header to d4d/exporters.php, or (3) unspecified input to d4d/contextMenu.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html; https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt; http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html
CVE: CVE-2012-3951
Published: 2012-07-31
Description: The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default password of admin for the (1) scrutinizer and (2) scrutremote accounts, which allows remote attackers to execute arbitrary SQL commands via a TCP session.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html; https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt; http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html
CVE: CVE-2012-3442
Published: 2012-07-31
Description: The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a data: URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.debian.org/security/2012/dsa-2529; http://www.mandriva.com/security/advisories?name=MDVSA-2012:143; http://www.openwall.com/lists/oss-security/2012/07/31/1
CVE: CVE-2012-3443
Published: 2012-07-31
Description: The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a denial of service (memory consumption) by uploading an image file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://www.debian.org/security/2012/dsa-2529; http://www.mandriva.com/security/advisories?name=MDVSA-2012:143; http://www.openwall.com/lists/oss-security/2012/07/31/1
CVE: CVE-2012-3444
Published: 2012-07-31
Description: The get_image_dimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote attackers to cause a denial of service (process or thread consumption) via a large TIFF image.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://www.debian.org/security/2012/dsa-2529; http://www.mandriva.com/security/advisories?name=MDVSA-2012:143; http://www.openwall.com/lists/oss-security/2012/07/31/1
CVE: CVE-2012-1364
Published: 2012-08-06
Description: Cisco Unified Computing System (UCS) 1.4 and 2.0 allows remote authenticated users to cause a denial of service (device reload) via a malformed SNMP request to a Fabric Interconnect (FI) device, aka Bug ID CSCts32452.
CVSS Score: 4.0 (MEDIUM)
References: http://www.cisco.com/en/US/docs/unified_computing/ucs/release/notes/OL_24086.html; http://www.cisco.com/en/US/docs/unified_computing/ucs/release/notes/OL_24086.html
CVE: CVE-2012-1365
Published: 2012-08-06
Description: Cisco Unified Computing System (UCS) 1.4 and 2.0 allows remote authenticated users to cause a denial of service (device reload) via a malformed SNMP request to a Fabric Interconnect (FI) device, aka Bug ID CSCts32463.
CVSS Score: 4.0 (MEDIUM)
References: http://www.cisco.com/en/US/docs/unified_computing/ucs/release/notes/OL_24086.html; http://www.cisco.com/en/US/docs/unified_computing/ucs/release/notes/OL_24086.html
CVE: CVE-2012-1367
Published: 2012-08-06
Description: The MallocLite implementation in Cisco IOS 12.0, 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (Route Processor crash) via a BGP UPDATE message with a modified local-preference (aka LOCAL_PREF) attribute length, aka Bug ID CSCtq06538.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://www.cisco.com/en/US/docs/ios/12_2sr/release/notes/122SRcavs1.html; http://www.cisco.com/en/US/docs/ios/12_2sr/release/notes/122SRcavs1.html
CVE: CVE-2012-1370
Published: 2012-08-06
Description: Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 allows remote authenticated users to cause a denial of service (vpnagentd process crash) via a crafted packet, aka Bug ID CSCty01670.
CVSS Score: 3.5 (LOW)
CWE: CWE-119
References: http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect30/release/notes/anyconnect30rn.html; http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect30/release/notes/anyconnect30rn.html
CVE: CVE-2012-2846
Published: 2012-08-06
Description: Google Chrome before 21.0.1180.57 on Linux does not properly isolate renderer processes, which allows remote attackers to cause a denial of service (cross-process interference) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://code.google.com/p/chromium/issues/detail?id=125225; http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html; http://code.google.com/p/chromium/issues/detail?id=125225
CVE: CVE-2012-2847
Published: 2012-08-06
Description: Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does not request user confirmation before continuing a large series of downloads, which allows user-assisted remote attackers to cause a denial of service (resource consumption) via a crafted web site.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://code.google.com/p/chromium/issues/detail?id=127522; http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15735
CVE: CVE-2012-2848
Published: 2012-08-06
Description: The drag-and-drop implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows user-assisted remote attackers to bypass intended file access restrictions via a crafted web site.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://code.google.com/p/chromium/issues/detail?id=127525; http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15658
CVE: CVE-2012-2849
Published: 2012-08-06
Description: Off-by-one error in the GIF decoder in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://code.google.com/p/chromium/issues/detail?id=128163; http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15653
CVE: CVE-2012-2850
Published: 2012-08-06
Description: Multiple unspecified vulnerabilities in the PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allow remote attackers to have an unknown impact via a crafted document.
CVSS Score: 6.8 (MEDIUM)
References: http://code.google.com/p/chromium/issues/detail?id=130251; http://code.google.com/p/chromium/issues/detail?id=130592; http://code.google.com/p/chromium/issues/detail?id=130611
CVE: CVE-2012-2851
Published: 2012-08-06
Description: Multiple integer overflows in the PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://code.google.com/p/chromium/issues/detail?id=132585; http://code.google.com/p/chromium/issues/detail?id=132694; http://code.google.com/p/chromium/issues/detail?id=132861