deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-3793
Published: 2010-06-15
Description: Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory consumption) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2160
Published: 2010-06-15
Description: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via an invalid offset in an unspecified undocumented opcode in ActionScript Virtual Machine 2, related to getouterscope, a different vulnerability than CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2161
Published: 2010-06-15
Description: Array index error in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified "types of Adobe Flash code."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=871; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
CVE: CVE-2010-2162
Published: 2010-06-15
Description: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors related to improper length calculation and the (1) STSC, (2) STSZ, and (3) STCO atoms.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2163
Published: 2010-06-15
Description: Multiple unspecified vulnerabilities in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2164
Published: 2010-06-15
Description: Use-after-free vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to an unspecified "image type within a certain function."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=872; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
CVE: CVE-2010-2165
Published: 2010-06-15
Description: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2166
Published: 2010-06-15
Description: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2167
Published: 2010-06-15
Description: Multiple heap-based buffer overflows in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to malformed (1) GIF or (2) JPEG data.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2169
Published: 2010-06-15
Description: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allow attackers to cause a denial of service (pointer memory corruption) or possibly execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2170
Published: 2010-06-15
Description: Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2181 and CVE-2010-2183.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2171
Published: 2010-06-15
Description: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors related to SWF files, decompression of embedded JPEG image data, and the DefineBits and other unspecified tags, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2172
Published: 2010-06-15
Description: Adobe Flash Player 9 before 9.0.277.0 on unspecified UNIX platforms allows attackers to cause a denial of service via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2173
Published: 2010-06-15
Description: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related to an "invalid pointer vulnerability" and the newclass (0x58) operator, a different vulnerability than CVE-2010-2174.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2174
Published: 2010-06-15
Description: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related to an "invalid pointer vulnerability" and the newfunction (0x44) operator, a different vulnerability than CVE-2010-2173.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2175
Published: 2010-06-15
Description: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2176
Published: 2010-06-15
Description: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2177
Published: 2010-06-15
Description: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2178
Published: 2010-06-15
Description: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2179
Published: 2010-06-15
Description: Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, when Firefox or Chrome is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to URL parsing.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2180
Published: 2010-06-15
Description: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2181
Published: 2010-06-15
Description: Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2170 and CVE-2010-2183.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2182
Published: 2010-06-15
Description: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2183
Published: 2010-06-15
Description: Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2170 and CVE-2010-2181.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2184
Published: 2010-06-15
Description: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2187, and CVE-2010-2188.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2185
Published: 2010-06-15
Description: Buffer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2186
Published: 2010-06-15
Description: Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2187
Published: 2010-06-15
Description: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, and CVE-2010-2188.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2188
Published: 2010-06-15
Description: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code by calling the ActionScript native object 2200 connect method multiple times with different arguments, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, and CVE-2010-2187.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2189
Published: 2010-06-15
Description: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, when used in conjunction with VMWare Tools on a VMWare platform, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
CVE: CVE-2010-2295
Published: 2010-06-15
Description: page/EventHandler.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 does not properly handle a change of the focused frame during the dispatching of keydown, which allows user-assisted remote attackers to redirect keystrokes via a crafted HTML document, aka rdar problem 7018610.  NOTE: this might overlap CVE-2010-1422.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=15766; http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2010-2296
Published: 2010-06-15
Description: The implementation of unspecified DOM methods in Google Chrome before 5.0.375.70 allows remote attackers to bypass the Same Origin Policy via unknown vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://code.google.com/p/chromium/issues/detail?id=39985; http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html; http://secunia.com/advisories/40072
CVE: CVE-2010-2297
Published: 2010-06-15
Description: rendering/FixedTableLayout.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an HTML document that has a large colspan attribute within a table.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://code.google.com/p/chromium/issues/detail?id=42723; http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2010-2298
Published: 2010-06-15
Description: browser/renderer_host/database_dispatcher_host.cc in Google Chrome before 5.0.375.70 on Linux does not properly handle ViewHostMsg_DatabaseOpenFile messages in chroot-based sandboxing, which allows remote attackers to bypass intended sandbox restrictions via vectors involving fchdir and chdir calls.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=43304; http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html; http://secunia.com/advisories/40072
CVE: CVE-2010-2299
Published: 2010-06-15
Description: The Clipboard::DispatchObject function in app/clipboard/clipboard.cc in Google Chrome before 5.0.375.70 does not properly handle CBF_SMBITMAP objects in a ViewHostMsg_ClipboardWriteObjectsAsync message, which might allow remote attackers to execute arbitrary code via vectors involving crafted data from the renderer process, related to a "Type Confusion" issue.
CVSS Score: 10.0 (HIGH)
CWE: CWE-843
References: http://code.google.com/p/chromium/issues/detail?id=43307; http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html; http://secunia.com/advisories/40072
CVE: CVE-2010-2300
Published: 2010-06-15
Description: Use-after-free vulnerability in the Element::normalizeAttributes function in dom/Element.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to handlers for DOM mutation events, aka rdar problem 7948784.  NOTE: this might overlap CVE-2010-1759.
CVSS Score: 10.0 (HIGH)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=43315; http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2010-2301
Published: 2010-06-15
Description: Cross-site scripting (XSS) vulnerability in editing/markup.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to inject arbitrary web script or HTML via vectors related to the node.innerHTML property of a TEXTAREA element.  NOTE: this might overlap CVE-2010-1762.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://code.google.com/p/chromium/issues/detail?id=43902; http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html