deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-0138
Published: 2012-02-14
Description: Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0137.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA12-045A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-015; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14811
CVE: CVE-2012-0144
Published: 2012-02-14
Description: Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in themeweb.aspx Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.us-cert.gov/cas/techalerts/TA12-045A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-011; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14386
CVE: CVE-2012-0145
Published: 2012-02-14
Description: Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in wizardlist.aspx Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.us-cert.gov/cas/techalerts/TA12-045A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-011; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14826
CVE: CVE-2012-0148
Published: 2012-02-14
Description: afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "AfdPoll Elevation of Privilege Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA12-045A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-009; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14852
CVE: CVE-2012-0149
Published: 2012-02-14
Description: afd.sys in the Ancillary Function Driver in Microsoft Windows Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/cas/techalerts/TA12-045A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-009; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14958
CVE: CVE-2012-0150
Published: 2012-02-14
Description: Buffer overflow in msvcrt.dll in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, aka "Msvcrt.dll Buffer Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/cas/techalerts/TA12-045A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-013; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14631
CVE: CVE-2012-0154
Published: 2012-02-14
Description: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers keyboard layout errors, aka "Keyboard Layout Use After Free Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/cas/techalerts/TA12-045A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-008; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14928
CVE: CVE-2012-0155
Published: 2012-02-14
Description: Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Remote Code Execution Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA12-045A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-010; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14781
CVE: CVE-2012-0757
Published: 2012-02-15
Description: The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0760, CVE-2012-0761, CVE-2012-0762, CVE-2012-0763, CVE-2012-0764, and CVE-2012-0766.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb12-02.html; http://www.adobe.com/support/security/bulletins/apsb12-02.html
CVE: CVE-2012-0758
Published: 2012-02-15
Description: Heap-based buffer overflow in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb12-02.html; http://www.adobe.com/support/security/bulletins/apsb12-02.html
CVE: CVE-2012-0759
Published: 2012-02-15
Description: Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0771.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb12-02.html; http://www.adobe.com/support/security/bulletins/apsb12-02.html
CVE: CVE-2012-0760
Published: 2012-02-15
Description: The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0757, CVE-2012-0761, CVE-2012-0762, CVE-2012-0763, CVE-2012-0764, and CVE-2012-0766.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb12-02.html; http://www.adobe.com/support/security/bulletins/apsb12-02.html
CVE: CVE-2012-0761
Published: 2012-02-15
Description: The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0757, CVE-2012-0760, CVE-2012-0762, CVE-2012-0763, CVE-2012-0764, and CVE-2012-0766.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/79241; http://www.adobe.com/support/security/bulletins/apsb12-02.html; http://www.securityfocus.com/bid/52001
CVE: CVE-2012-0762
Published: 2012-02-15
Description: The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0757, CVE-2012-0760, CVE-2012-0761, CVE-2012-0763, CVE-2012-0764, and CVE-2012-0766.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/79242; http://www.adobe.com/support/security/bulletins/apsb12-02.html; http://www.securityfocus.com/bid/52002
CVE: CVE-2012-0763
Published: 2012-02-15
Description: The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0757, CVE-2012-0760, CVE-2012-0761, CVE-2012-0762, CVE-2012-0764, and CVE-2012-0766.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb12-02.html; http://www.adobe.com/support/security/bulletins/apsb12-02.html
CVE: CVE-2012-0764
Published: 2012-02-15
Description: The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0757, CVE-2012-0760, CVE-2012-0761, CVE-2012-0762, CVE-2012-0763, and CVE-2012-0766.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/79244; http://www.adobe.com/support/security/bulletins/apsb12-02.html; http://www.securityfocus.com/bid/52004
CVE: CVE-2012-0765
Published: 2012-02-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in Adobe RoboHelp 8 and 9 for Word allow remote attackers to inject arbitrary web script or HTML via a crafted URL, related to certain .htm files in (1) template_stock and (2) template_csh directories.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/79251; http://secunia.com/advisories/47936; http://www.adobe.com/support/security/bulletins/apsb12-04.html
CVE: CVE-2012-0766
Published: 2012-02-15
Description: The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0757, CVE-2012-0760, CVE-2012-0761, CVE-2012-0762, CVE-2012-0763, and CVE-2012-0764.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/79245; http://www.adobe.com/support/security/bulletins/apsb12-02.html; http://osvdb.org/79245
CVE: CVE-2011-3563
Published: 2012-02-15
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote attackers to affect confidentiality and availability via unknown vectors related to Sound.
CVSS Score: 6.4 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00009.html
CVE: CVE-2012-0497
Published: 2012-02-15
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, and 6 Update 30 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1663&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2305&w=2
CVE: CVE-2012-0498
Published: 2012-02-15
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1663&w=2
CVE: CVE-2012-0499
Published: 2012-02-15
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier; and JavaFX 2.0.2 and earlier; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00009.html
CVE: CVE-2012-0500
Published: 2012-02-15
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and JavaFX 2.0.2 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1663&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2305&w=2
CVE: CVE-2012-0501
Published: 2012-02-15
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect availability via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1663&w=2
CVE: CVE-2012-0502
Published: 2012-02-15
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and availability, related to AWT.
CVSS Score: 6.4 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00009.html
CVE: CVE-2012-0503
Published: 2012-02-15
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability, related to I18n.
CVSS Score: 7.5 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00009.html
CVE: CVE-2012-0504
Published: 2012-02-15
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, and 6 Update 30 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install and the Java Update mechanism.
CVSS Score: 9.3 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1663&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2305&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2253&w=2
CVE: CVE-2012-0505
Published: 2012-02-15
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Serialization.
CVSS Score: 7.5 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00009.html
CVE: CVE-2012-0506
Published: 2012-02-15
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via unknown vectors related to CORBA.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00009.html
CVE: CVE-2012-0508
Published: 2012-02-15
Description: Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX, 1.3.0 and earlier, and 1.2.2 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2253&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2612&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7681&w=2
CVE: CVE-2012-0751
Published: 2012-02-16
Description: The ActiveX control in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html; http://secunia.com/advisories/48265; http://www.adobe.com/support/security/bulletins/apsb12-03.html
CVE: CVE-2012-0752
Published: 2012-02-16
Description: Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) by leveraging an unspecified "type confusion."
CVSS Score: 9.3 (HIGH)
CWE: CWE-843
References: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html; http://rhn.redhat.com/errata/RHSA-2012-0144.html; http://secunia.com/advisories/48265
CVE: CVE-2012-0753
Published: 2012-02-16
Description: Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted MP4 data.
CVSS Score: 9.3 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html; http://rhn.redhat.com/errata/RHSA-2012-0144.html; http://secunia.com/advisories/48265
CVE: CVE-2012-0754
Published: 2012-02-16
Description: Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 8.1 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html; http://rhn.redhat.com/errata/RHSA-2012-0144.html; http://secunia.com/advisories/48265
CVE: CVE-2012-0755
Published: 2012-02-16
Description: Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2012-0756.
CVSS Score: 9.3 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html; http://rhn.redhat.com/errata/RHSA-2012-0144.html; http://secunia.com/advisories/48265
CVE: CVE-2012-0756
Published: 2012-02-16
Description: Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2012-0755.
CVSS Score: 9.3 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html; http://rhn.redhat.com/errata/RHSA-2012-0144.html; http://secunia.com/advisories/48265
CVE: CVE-2012-0767
Published: 2012-02-16
Description: Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS (UXSS)," as exploited in the wild in February 2012.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html; http://rhn.redhat.com/errata/RHSA-2012-0144.html; http://secunia.com/advisories/48265
CVE: CVE-2011-3015
Published: 2012-02-16
Description: Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190
References: http://code.google.com/p/chromium/issues/detail?id=105803; http://googlechromereleases.blogspot.com/2012/02/chrome-stable-update.html; http://secunia.com/advisories/48016
CVE: CVE-2011-3016
Published: 2012-02-16
Description: Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving counter nodes, related to a "read-after-free" issue.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=106336; http://googlechromereleases.blogspot.com/2012/02/chrome-stable-update.html; http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
CVE: CVE-2011-3017
Published: 2012-02-16
Description: Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to database handling.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=108695; http://googlechromereleases.blogspot.com/2012/02/chrome-stable-update.html; http://secunia.com/advisories/48016
CVE: CVE-2011-3018
Published: 2012-02-16
Description: Heap-based buffer overflow in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to path rendering.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://code.google.com/p/chromium/issues/detail?id=110172; http://googlechromereleases.blogspot.com/2012/02/chrome-stable-update.html; http://secunia.com/advisories/48016
CVE: CVE-2011-3019
Published: 2012-02-16
Description: Heap-based buffer overflow in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska video (aka MKV) file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787
References: http://code.google.com/p/chromium/issues/detail?id=110849; http://googlechromereleases.blogspot.com/2012/02/chrome-stable-update.html; http://secunia.com/advisories/48016
CVE: CVE-2011-3020
Published: 2012-02-16
Description: Unspecified vulnerability in the Native Client validator implementation in Google Chrome before 17.0.963.56 has unknown impact and remote attack vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://code.google.com/p/chromium/issues/detail?id=111575; http://googlechromereleases.blogspot.com/2012/02/chrome-stable-update.html; http://secunia.com/advisories/48016