deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-0434
Published: 2011-03-07
Description: Multiple SQL injection vulnerabilities in Domain Technologie Control (DTC) before 0.32.9 allow remote attackers to execute arbitrary SQL commands via the cid parameter to (1) admin/bw_per_month.php or (2) client/bw_per_month.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commit%3Bh=89da9c519b04cda1b23e6290d2b0a6cea1bae31e; http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commit%3Bh=e94e8b9cc354bfcaeb284d5331b815256bb46162; http://packages.debian.org/changelogs/pool/main/d/dtc/dtc_0.29.17-1+lenny1/changelog
CVE: CVE-2011-0435
Published: 2011-03-07
Description: Domain Technologie Control (DTC) before 0.32.9 does not require authentication for (1) admin/bw_per_month.php and (2) client/bw_per_month.php, which allows remote attackers to obtain potentially sensitive bandwidth information via a direct request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commit%3Bh=89da9c519b04cda1b23e6290d2b0a6cea1bae31e; http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commit%3Bh=e94e8b9cc354bfcaeb284d5331b815256bb46162; http://packages.debian.org/changelogs/pool/main/d/dtc/dtc_0.29.17-1+lenny1/changelog
CVE: CVE-2011-0436
Published: 2011-03-07
Description: The register_user function in client/new_account_form.php in Domain Technologie Control (DTC) before 0.32.9 includes a cleartext password in an e-mail message, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=614302; http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commit%3Bh=adffff7efb3687ff465ee0552a944dd3109f3cb0; http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commit%3Bh=f8e3b2d7cc2da313addc05394568ab[PII_REDACTED]
CVE: CVE-2011-0437
Published: 2011-03-07
Description: shared/inc/sql/ssh.php in the SSH accounts management implementation in Domain Technologie Control (DTC) before 0.32.9 allows remote authenticated users to delete arbitrary accounts via the edssh_account parameter in a deletesshaccount Delete action.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commit%3Bh=9b75112fc12fead5740b1aaf0df562b5a9045ec0; http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commit%3Bh=c97ab4ae43945de36534c40004d713b3b10113db; http://packages.debian.org/changelogs/pool/main/d/dtc/dtc_0.29.17-1+lenny1/changelog
CVE: CVE-2011-0344
Published: 2011-03-08
Description: Multiple stack-based buffer overflows in unspecified CGI programs in the Unified Maintenance Tool web interface in the embedded web server in the Communication Server (CS) in Alcatel-Lucent OmniPCX Enterprise before R9.0 H1.301.50 allow remote attackers to execute arbitrary code via crafted HTTP headers.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=896; http://secunia.com/advisories/43588; http://www.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2011001.pdf
CVE: CVE-2011-0345
Published: 2011-03-08
Description: Directory traversal vulnerability in the NMS server in Alcatel-Lucent OmniVista 4760 R5.1.06.03 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in HTTP GET requests, related to the lang variable.
CVSS Score: 3.3 (LOW)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2011/Mar/8; http://secunia.com/advisories/43507; http://securityreason.com/securityalert/8122
CVE: CVE-2011-1306
Published: 2011-03-08
Description: Unspecified vulnerability in the Scratchpad application in Google Chrome OS before R10 0.10.156.46 Beta has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://googlechromereleases.blogspot.com/2011/03/chrome-os-beta-channel-update.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/65991; http://googlechromereleases.blogspot.com/2011/03/chrome-os-beta-channel-update.html
CVE: CVE-2011-1307
Published: 2011-03-08
Description: The installer in IBM WebSphere Application Server (WAS) before 7.0.0.15 uses 777 permissions for a temporary log directory, which allows local users to have unintended access to log files via standard filesystem operations, a different vulnerability than CVE-2009-1173.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM20021; http://www-01.ibm.com/support/docview.wss?uid=swg27014463; http://www.securityfocus.com/bid/46736
CVE: CVE-2011-1308
Published: 2011-03-08
Description: Cross-site scripting (XSS) vulnerability in the Installation Verification Test (IVT) application in the Install component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM20393; http://www-01.ibm.com/support/docview.wss?uid=swg27014463; http://www.securityfocus.com/bid/46736
CVE: CVE-2011-1309
Published: 2011-03-08
Description: The Plug-in component in IBM WebSphere Application Server (WAS) before 7.0.0.15 does not properly handle trace requests, which has unspecified impact and attack vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM22860; http://www-01.ibm.com/support/docview.wss?uid=swg27014463; http://www.securityfocus.com/bid/46736
CVE: CVE-2011-1310
Published: 2011-03-08
Description: The Administrative Scripting Tools component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15, when tracing is enabled, places wsadmin command parameters into the (1) wsadmin.traceout and (2) trace.log files, which allows local users to obtain potentially sensitive information by reading these files.
CVSS Score: 1.9 (LOW)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM18736; http://www-01.ibm.com/support/docview.wss?uid=swg27014463; http://www-01.ibm.com/support/docview.wss?uid=swg1PM18736
CVE: CVE-2011-1311
Published: 2011-03-08
Description: The Security component in IBM WebSphere Application Server (WAS) before 7.0.0.15, when a J2EE 1.4 application is used, determines the security role mapping on the basis of the ibm-application-bnd.xml file instead of the intended ibm-application-bnd.xmi file, which might allow remote authenticated users to gain privileges in opportunistic circumstances by requesting a service.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM25455; http://www-01.ibm.com/support/docview.wss?uid=swg27014463; http://www-01.ibm.com/support/docview.wss?uid=swg1PM25455
CVE: CVE-2011-1312
Published: 2011-03-08
Description: The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.31 and 7.x before 7.0.0.15 does not prevent modifications of the primary admin id, which allows remote authenticated administrators to bypass intended access restrictions by mapping a (1) user or (2) group to an administrator role.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PK88606; http://www-01.ibm.com/support/docview.wss?uid=swg27014463; http://www-01.ibm.com/support/docview.wss?uid=swg1PK88606
CVE: CVE-2011-1313
Published: 2011-03-08
Description: Double free vulnerability in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15 allows remote backend IIOP servers to cause a denial of service (S0C4 ABEND and storage corruption) by rejecting IIOP requests at opportunistic time instants, as demonstrated by requests associated with an ORB_Request::getACRWorkElementPtr function call.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM17170; http://www-01.ibm.com/support/docview.wss?uid=swg27014463; http://www-01.ibm.com/support/docview.wss?uid=swg1PM17170
CVE: CVE-2011-1314
Published: 2011-03-08
Description: The Service Integration Bus (SIB) messaging engine in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (daemon hang) by performing close operations via network connections to a queue manager.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM19834; http://www-01.ibm.com/support/docview.wss?uid=swg27014463; http://www-01.ibm.com/support/docview.wss?uid=swg1PM19834
CVE: CVE-2011-1315
Published: 2011-03-08
Description: Memory leak in the messaging engine in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) via network connections associated with a NULL return value from a synchronous JMS receive call.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM23626; http://www-01.ibm.com/support/docview.wss?uid=swg27014463; http://www-01.ibm.com/support/docview.wss?uid=swg1PM23626
CVE: CVE-2011-1316
Published: 2011-03-08
Description: The Session Initiation Protocol (SIP) Proxy in the HTTP Transport component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (worker thread exhaustion and UDP messaging outage) by sending many UDP messages.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM23115; http://www-01.ibm.com/support/docview.wss?uid=swg27014463; http://www-01.ibm.com/support/docview.wss?uid=swg1PM23115
CVE: CVE-2011-1317
Published: 2011-03-08
Description: Memory leak in com.ibm.ws.jsp.runtime.WASJSPStrBufferImpl in the JavaServer Pages (JSP) component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) by sending many JSP requests that trigger large responses.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM19500; http://www-01.ibm.com/support/docview.wss?uid=swg27014463; http://www-01.ibm.com/support/docview.wss?uid=swg1PM19500
CVE: CVE-2011-1318
Published: 2011-03-08
Description: Memory leak in org.apache.jasper.runtime.JspWriterImpl.response in the JavaServer Pages (JSP) component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) by accessing a JSP page of an application that is repeatedly stopped and restarted.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM23029; http://www-01.ibm.com/support/docview.wss?uid=swg27014463; http://www-01.ibm.com/support/docview.wss?uid=swg1PM23029
CVE: CVE-2011-1319
Published: 2011-03-08
Description: The Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15 allows remote authenticated users to cause a denial of service (memory consumption) by using a Lightweight Third-Party Authentication (LTPA) token for authentication.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM18644; http://www-01.ibm.com/support/docview.wss?uid=swg27014463; http://www-01.ibm.com/support/docview.wss?uid=swg1PM18644
CVE: CVE-2011-1320
Published: 2011-03-08
Description: The Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15, when the Tivoli Integrated Portal / embedded WebSphere Application Server (TIP/eWAS) framework is used, does not properly delete AuthCache entries upon a logout, which might allow remote attackers to access the server by leveraging an unattended workstation.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM21536; http://www-01.ibm.com/support/docview.wss?uid=swg27014463; http://www-01.ibm.com/support/docview.wss?uid=swg1PM21536
CVE: CVE-2011-1321
Published: 2011-03-08
Description: The AuthCache purge implementation in the Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 does not purge a user from the PlatformCredential cache, which might allow remote authenticated users to gain privileges by leveraging a group membership specified in an old RACF Object (aka RACO).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM24668; http://www-01.ibm.com/support/docview.wss?uid=swg27014463; http://www-01.ibm.com/support/docview.wss?uid=swg1PM24668
CVE: CVE-2011-1322
Published: 2011-03-08
Description: The SOAP with Attachments API for Java (SAAJ) implementation in the Web Services component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) via encrypted SOAP messages.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM19534; http://www-01.ibm.com/support/docview.wss?uid=swg27014463; http://www-01.ibm.com/support/docview.wss?uid=swg1PM19534
CVE: CVE-2011-0029
Published: 2011-03-09
Description: Untrusted search path vulnerability in the client in Microsoft Remote Desktop Connection 5.2, 6.0, 6.1, and 7.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp file, aka "Remote Desktop Insecure Library Loading Vulnerability."
CVSS Score: 7.4 (HIGH)
References: http://osvdb.org/71014; http://secunia.com/advisories/43628; http://www.securitytracker.com/id?1025172
CVE: CVE-2011-0032
Published: 2011-03-09
Description: Untrusted search path vulnerability in DirectShow in Microsoft Windows Vista SP1 and SP2, Windows 7 Gold and SP1, Windows Server 2008 R2 and R2 SP1, and Windows Media Center TV Pack for Windows Vista allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Digital Video Recording (.dvr-ms), Windows Recorded TV Show (.wtv), or .mpg file, aka "DirectShow Insecure Library Loading Vulnerability."
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/71015; http://secunia.com/advisories/43626; http://www.securityfocus.com/bid/46682
CVE: CVE-2011-0042
Published: 2011-03-09
Description: SBE.dll in the Stream Buffer Engine in Windows Media Player and Windows Media Center in Microsoft Windows XP SP2 and SP3, Windows XP Media Center Edition 2005 SP3, Windows Vista SP1 and SP2, Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista does not properly parse Digital Video Recording (.dvr-ms) files, which allows remote attackers to execute arbitrary code via a crafted file, aka "DVR-MS Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://osvdb.org/71016; http://secunia.com/advisories/43626; http://www.securityfocus.com/bid/46680
CVE: CVE-2011-0464
Published: 2011-03-09
Description: Unspecified vulnerability in Novell Vibe OnPrem 3.0 before Hot Patch 1 allows remote attackers to execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/43606; http://securitytracker.com/id?1025163; http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5088845.html
CVE: CVE-2011-1099
Published: 2011-03-09
Description: Multiple directory traversal vulnerabilities in FocalMedia.Net Quick Polls before 1.0.2 allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the p parameter in a preview action to index.php, or (2) delete arbitrary files via a .. (dot dot) in the p parameter in a delete action to index.php.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/71028; http://secunia.com/advisories/43599; http://securityreason.com/securityalert/8121
CVE: CVE-2011-1343
Published: 2011-03-09
Description: SQL injection vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus before 7.3.0.4 allows remote attackers to execute arbitrary SQL commands via "dynamic SQL parameters."
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/43577; http://www.ibm.com/support/docview.wss?uid=swg1IZ83269; http://www.ibm.com/support/docview.wss?uid=swg24029093
CVE: CVE-2011-1344
Published: 2011-03-10
Description: Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.5; iOS before 4.3.2 for iPhone, iPod, and iPad; iOS before 4.2.7 for iPhone 4 (CDMA); and possibly other products allows remote attackers to execute arbitrary code by adding children to a WBR tag and then removing the tag, related to text nodes, as demonstrated by Chaouki Bekrar during a Pwn2Own competition at CanSecWest 2011.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011; http://lists.apple.com/archives/security-announce/2011//Apr/msg00000.html; http://lists.apple.com/archives/security-announce/2011//Apr/msg00001.html
CVE: CVE-2011-1345
Published: 2011-03-10
Description: Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, as demonstrated by Stephen Fewer as the first of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011, aka "Object Management Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
References: http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011; http://twitter.com/aaronportnoy/statuses/[PII_REDACTED]8855680; http://twitter.com/msftsecresponse/statuses/[PII_REDACTED]8516224
CVE: CVE-2011-1346
Published: 2011-03-10
Description: Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by Stephen Fewer as the second of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011.
CVSS Score: 9.3 (HIGH)
References: http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011; http://twitter.com/aaronportnoy/statuses/[PII_REDACTED]8855680; http://twitter.com/msftsecresponse/statuses/[PII_REDACTED]8516224
CVE: CVE-2011-1347
Published: 2011-03-10
Description: Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to bypass Protected Mode and create arbitrary files by leveraging access to a Low integrity process, as demonstrated by Stephen Fewer as the third of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011.
CVSS Score: 8.8 (HIGH)
References: http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011; http://twitter.com/aaronportnoy/statuses/[PII_REDACTED]8855680; http://twitter.com/msftsecresponse/statuses/[PII_REDACTED]8516224
CVE: CVE-2011-1185
Published: 2011-03-11
Description: Google Chrome before 10.0.648.127 does not prevent (1) navigation and (2) close operations on the top location of a sandboxed frame, which has unspecified impact and remote attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://code.google.com/p/chromium/issues/detail?id=42574; http://code.google.com/p/chromium/issues/detail?id=42765; http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html
CVE: CVE-2011-1186
Published: 2011-03-11
Description: Google Chrome before 10.0.648.127 on Linux does not properly handle parallel execution of calls to the print method, which might allow remote attackers to cause a denial of service (application crash) via crafted JavaScript code.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=66962; http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html; http://www.securityfocus.com/bid/46785
CVE: CVE-2011-1187
Published: 2011-03-11
Description: Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/chromium/issues/detail?id=69187; http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html; http://secunia.com/advisories/48972
CVE: CVE-2011-1188
Published: 2011-03-11
Description: Google Chrome before 10.0.648.127 does not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://code.google.com/p/chromium/issues/detail?id=69628; http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html
CVE: CVE-2011-1189
Published: 2011-03-11
Description: Google Chrome before 10.0.648.127 does not properly perform box layout, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale node."
CVSS Score: 7.5 (HIGH)
References: http://code.google.com/p/chromium/issues/detail?id=70027; http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html; http://www.securityfocus.com/bid/46785
CVE: CVE-2011-1190
Published: 2011-03-11
Description: The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/chromium/issues/detail?id=70336; http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html
CVE: CVE-2011-1191
Published: 2011-03-11
Description: Use-after-free vulnerability in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of DOM URLs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=70442; http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html; http://www.securityfocus.com/bid/46785
CVE: CVE-2011-1192
Published: 2011-03-11
Description: Google Chrome before 10.0.648.127 on Linux does not properly handle Unicode ranges, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125
References: http://code.google.com/p/chromium/issues/detail?id=70779; http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html; http://www.securityfocus.com/bid/46785
CVE: CVE-2011-1193
Published: 2011-03-11
Description: Google V8, as used in Google Chrome before 10.0.648.127, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://code.google.com/p/chromium/issues/detail?id=70877; http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html; http://www.securityfocus.com/bid/46785
CVE: CVE-2011-1194
Published: 2011-03-11
Description: Multiple unspecified vulnerabilities in Google Chrome before 10.0.648.127 allow remote attackers to bypass the pop-up blocker via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://code.google.com/p/chromium/issues/detail?id=70885; http://code.google.com/p/chromium/issues/detail?id=71167; http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html
CVE: CVE-2011-1195
Published: 2011-03-11
Description: Use-after-free vulnerability in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to "document script lifetime handling."
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=71763; http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html; http://www.securityfocus.com/bid/46785