deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-0746
Published: 2013-01-13
Description: Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 do not properly implement quickstubs that use the jsval data type for their return values, which allows remote attackers to execute arbitrary code or cause a denial of service (compartment mismatch and application crash) via crafted JavaScript code that is not properly handled during garbage collection.
CVSS Score: 9.3 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0747
Published: 2013-01-13
Description: The gPluginHandler.handleEvent function in the plugin handler in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not properly enforce the Same Origin Policy, which allows remote attackers to conduct clickjacking attacks via crafted JavaScript code that listens for a mutation event.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0748
Published: 2013-01-13
Description: The XBL.__proto__.toString implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 makes it easier for remote attackers to bypass the ASLR protection mechanism by calling the toString function of an XBL object.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0749
Published: 2013-01-13
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before 2.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0750
Published: 2013-01-13
Description: Integer overflow in the JavaScript implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted string concatenation, leading to improper memory allocation and a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0751
Published: 2013-01-13
Description: Mozilla Firefox before 18.0 on Android and SeaMonkey before 2.15 do not restrict a touch event to a single IFRAME element, which allows remote attackers to obtain sensitive information or possibly conduct cross-site scripting (XSS) attacks via a crafted HTML document.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0752
Published: 2013-01-13
Description: Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XBL file with multiple bindings that have SVG content.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0753
Published: 2013-01-13
Description: Use-after-free vulnerability in the serializeToStream implementation in the XMLSerializer component in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via crafted web content.
CVSS Score: 9.3 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0754
Published: 2013-01-13
Description: Use-after-free vulnerability in the ListenerManager implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via vectors involving the triggering of garbage collection after memory allocation for listener objects.
CVSS Score: 9.3 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0755
Published: 2013-01-13
Description: Use-after-free vulnerability in the mozVibrate implementation in the Vibrate library in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via vectors related to the domDoc pointer.
CVSS Score: 9.3 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0756
Published: 2013-01-13
Description: Use-after-free vulnerability in the obj_toSource function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted web page referencing JavaScript Proxy objects that are not properly handled during garbage collection.
CVSS Score: 9.3 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0757
Published: 2013-01-13
Description: The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not prevent modifications to the prototype of an object, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by referencing Object.prototype.__proto__ in a crafted HTML document.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0758
Published: 2013-01-13
Description: Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging improper interaction between plugin objects and SVG elements.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0759
Published: 2013-01-13
Description: Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to spoof the address bar via vectors involving authentication information in the userinfo field of a URL, in conjunction with a 204 (aka No Content) HTTP status code.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0760
Published: 2013-01-13
Description: Buffer overflow in the CharDistributionAnalysis::HandleOneChar function in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted document.
CVSS Score: 9.3 (HIGH)
CWE: CWE-120
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0761
Published: 2013-01-13
Description: Use-after-free vulnerability in the mozilla::TrackUnionStream::EndTrack implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0762
Published: 2013-01-13
Description: Use-after-free vulnerability in the imgRequest::OnStopFrame function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0763
Published: 2013-01-13
Description: Use-after-free vulnerability in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to Mesa drivers and a resized WebGL canvas.
CVSS Score: 9.3 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0764
Published: 2013-01-13
Description: The nsSOCKSSocketInfo::ConnectToProxy function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not ensure thread safety for SSL sessions, which allows remote attackers to execute arbitrary code via crafted data, as demonstrated by e-mail message data.
CVSS Score: 9.3 (HIGH)
CWE: CWE-326
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0766
Published: 2013-01-13
Description: Use-after-free vulnerability in the ~nsHTMLEditRules implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0767
Published: 2013-01-13
Description: The nsSVGPathElement::GetPathLengthScale function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0768
Published: 2013-01-13
Description: Stack-based buffer overflow in the Canvas implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via an HTML document that specifies invalid width and height values.
CVSS Score: 9.3 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0769
Published: 2013-01-13
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0770
Published: 2013-01-13
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0771
Published: 2013-01-13
Description: Heap-based buffer overflow in the gfxTextRun::ShrinkToLigatureBoundaries function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted document.
CVSS Score: 9.3 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0155
Published: 2013-01-13
Description: Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request, as demonstrated by certain "[nil]" values, a related issue to CVE-2012-2660 and CVE-2012-2694.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://ics-cert.us-cert.gov/advisories/ICSA-13-036-01A; http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html; http://lists.opensuse.org/opensuse-updates/2013-12/msg00079.html
CVE: CVE-2013-0156
Published: 2013-01-13
Description: active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) involving nested XML entity references, by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://ics-cert.us-cert.gov/advisories/ICSA-13-036-01A; http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html; http://rhn.redhat.com/errata/RHSA-2013-0153.html
CVE: CVE-2012-3174
Published: 2013-01-14
Description: Unspecified vulnerability in Oracle Java 7 before Update 11 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0422.  NOTE: some parties have mapped CVE-2012-3174 to an issue involving recursive use of the Reflection API, but that issue is already covered as part of CVE-2013-0422.  This identifier is for a different vulnerability whose details are not public as of 20130114.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://blog.fuseyism.com/index.php/2013/01/15/security-icedtea-2-1-4-2-2-4-2-3-4-released/; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00025.html; http://rhn.redhat.com/errata/RHSA-2013-0156.html
CVE: CVE-2012-5145
Published: 2013-01-15
Description: Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG layout.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html; https://code.google.com/p/chromium/issues/detail?id=162494
CVE: CVE-2012-5146
Published: 2013-01-15
Description: Google Chrome before 24.0.1312.52 allows remote attackers to bypass the Same Origin Policy via a malformed URL.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html; https://code.google.com/p/chromium/issues/detail?id=165622
CVE: CVE-2012-5147
Published: 2013-01-15
Description: Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM handling.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html; https://code.google.com/p/chromium/issues/detail?id=165864
CVE: CVE-2012-5148
Published: 2013-01-15
Description: The hyphenation functionality in Google Chrome before 24.0.1312.52 does not properly validate file names, which has unspecified impact and attack vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html; https://code.google.com/p/chromium/issues/detail?id=167122
CVE: CVE-2012-5149
Published: 2013-01-15
Description: Integer overflow in the audio IPC layer in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html; https://code.google.com/p/chromium/issues/detail?id=166795
CVE: CVE-2012-5150
Published: 2013-01-15
Description: Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving seek operations on video data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html; https://code.google.com/p/chromium/issues/detail?id=165601
CVE: CVE-2012-5151
Published: 2013-01-15
Description: Integer overflow in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code in a PDF document.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; https://code.google.com/p/chromium/issues/detail?id=165538; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16453
CVE: CVE-2012-5152
Published: 2013-01-15
Description: Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving seek operations on video data.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html; https://code.google.com/p/chromium/issues/detail?id=165430
CVE: CVE-2012-5153
Published: 2013-01-15
Description: Google V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds access to stack memory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html; http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html; https://code.google.com/p/chromium/issues/detail?id=164565