deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-1172
Published: 2011-06-22
Description: net/ipv6/netfilter/ip6_tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://downloads.avaya.com/css/P8/documents/100145416; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6a8ab060779779de8aea92ce3337ca348f973f54; http://marc.info/?l=linux-kernel&m=[PII_REDACTED]0061&w=2
CVE: CVE-2011-1173
Published: 2011-06-22
Description: The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.39 on the x86_64 platform allows remote attackers to obtain potentially sensitive information from kernel stack memory by reading uninitialized data in the ah field of an Acorn Universal Networking (AUN) packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=67c5c6cb8129c595f21e88254a3fc6b3b841ae8e; http://marc.info/?l=linux-netdev&m=[PII_REDACTED]8021&w=2; http://securityreason.com/securityalert/8279
CVE: CVE-2011-1330
Published: 2011-06-22
Description: Cross-site scripting (XSS) vulnerability in WeblyGo 5.0 Pro/LE, 5.02 Pro/LE, 5.03 Pro/LE, 5.04 Pro/LE, and 5.10 Pro/LE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN43386477/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000042; http://secunia.com/advisories/44994
CVE: CVE-2011-2200
Published: 2011-06-22
Description: The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-20
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629938; http://cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.2&id=6519a1f77c61d753d4c97efd6e15630eb275336e; http://cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.4&id=c3223ba6c401ba81df[PII_REDACTED]a47c485e6cd7
CVE: CVE-2011-2206
Published: 2011-06-22
Description: XMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference, a different vulnerability than CVE-2011-1757.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-399
References: http://groups.google.com/group/djabberd/msg/80a462d5c28873d7?dmode=source&output=gplain; http://www.openwall.com/lists/oss-security/2011/06/14/6; http://www.openwall.com/lists/oss-security/2011/06/15/5
CVE: CVE-2011-2533
Published: 2011-06-22
Description: The configure script in D-Bus (aka DBus) 1.2.x before 1.2.28 allows local users to overwrite arbitrary files via a symlink attack on an unspecified file in /tmp/.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: http://cgit.freedesktop.org/dbus/dbus/tree/NEWS?h=dbus-1.2; http://www.securitytracker.com/id?1025720; https://exchange.xforce.ibmcloud.com/vulnerabilities/68173
CVE: CVE-2011-2534
Published: 2011-06-22
Description: Buffer overflow in the clusterip_proc_write function in net/ipv4/netfilter/ipt_CLUSTERIP.c in the Linux kernel before 2.6.39 might allow local users to cause a denial of service or have unspecified other impact via a crafted write operation, related to string data that lacks a terminating '\0' character.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=961ed183a9fd080cf306c659b8736007e44065a5; http://marc.info/?l=netfilter&m=[PII_REDACTED]9888&w=2; http://marc.info/?l=netfilter-devel&m=[PII_REDACTED]7564&w=2
CVE: CVE-2009-5044
Published: 2011-06-24
Description: contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf#####.tmp temporary file.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: ftp://ftp.gnu.org/gnu/groff/groff-1.20.1-1.21.diff.gz; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=538330; http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff
CVE: CVE-2011-0196
Published: 2011-06-24
Description: AirPort in Apple Mac OS X 10.5.8 allows remote attackers to cause a denial of service (out-of-bounds read and reboot) via Wi-Fi frames on the local wireless network.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html; http://support.apple.com/kb/HT4723; http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
CVE: CVE-2011-0197
Published: 2011-06-24
Description: App Store in Apple Mac OS X before 10.6.8 creates a log entry containing a user's AppleID password, which might allow local users to obtain sensitive information by reading a log file, as demonstrated by a log file that has non-default permissions.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html; http://support.apple.com/kb/HT4723; http://www.securityfocus.com/bid/48443
CVE: CVE-2011-0198
Published: 2011-06-24
Description: Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code via a crafted embedded TrueType font.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html; http://support.apple.com/kb/HT4723; http://www.securityfocus.com/bid/48436
CVE: CVE-2011-0199
Published: 2011-06-24
Description: The Certificate Trust Policy component in Apple Mac OS X before 10.6.8 does not perform CRL checking for Extended Validation (EV) certificates that lack OCSP URLs, which might allow man-in-the-middle attackers to spoof an SSL server via a revoked certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295, CWE-295
References: http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html; http://support.apple.com/kb/HT4723; http://www.securityfocus.com/bid/48447
CVE: CVE-2011-0200
Published: 2011-06-24
Description: Integer overflow in ColorSync in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image containing a crafted embedded ColorSync profile that triggers a heap-based buffer overflow.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html; http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
CVE: CVE-2011-0201
Published: 2011-06-24
Description: Off-by-one error in the CoreFoundation framework in Apple Mac OS X before 10.6.8 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a CFString object that triggers a buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html; http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html; http://support.apple.com/kb/HT4723
CVE: CVE-2011-0202
Published: 2011-06-24
Description: Integer overflow in CoreGraphics in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted embedded Type 1 font in a PDF document.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html; http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html; http://support.apple.com/kb/HT4723
CVE: CVE-2011-0203
Published: 2011-06-24
Description: Absolute path traversal vulnerability in xftpd in the FTP Server component in Apple Mac OS X before 10.6.8 allows remote attackers to list arbitrary directories by using the root directory as the starting point of a recursive listing.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html; http://support.apple.com/kb/HT4723; http://www.securityfocus.com/bid/48418
CVE: CVE-2011-0204
Published: 2011-06-24
Description: Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2011-07/0034.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE: CVE-2011-0205
Published: 2011-06-24
Description: Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG2000 image.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html; http://support.apple.com/kb/HT4723; http://www.securityfocus.com/bid/48439
CVE: CVE-2011-0206
Published: 2011-06-24
Description: Buffer overflow in International Components for Unicode (ICU) in Apple Mac OS X before 10.6.8 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving uppercase strings.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html; http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
CVE: CVE-2011-0207
Published: 2011-06-24
Description: The MobileMe component in Apple Mac OS X before 10.6.8 uses a cleartext HTTP session for the Mail application to read e-mail aliases, which allows remote attackers to obtain potentially sensitive alias information by sniffing the network.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html; http://support.apple.com/kb/HT4723; http://www.securityfocus.com/bid/48444
CVE: CVE-2011-0208
Published: 2011-06-24
Description: QuickLook in Apple Mac OS X 10.6 before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Microsoft Office document.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html; http://support.apple.com/kb/HT4723
CVE: CVE-2011-0209
Published: 2011-06-24
Description: Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted RIFF WAV file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190
References: http://lists.apple.com/archives/security-announce/2011//Aug/msg00000.html; http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html; http://support.apple.com/kb/HT4723
CVE: CVE-2011-0210
Published: 2011-06-24
Description: QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted sample tables in a movie file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787
References: http://lists.apple.com/archives/security-announce/2011//Aug/msg00000.html; http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html; http://support.apple.com/kb/HT4723
CVE: CVE-2011-0211
Published: 2011-06-24
Description: Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190
References: http://lists.apple.com/archives/security-announce/2011//Aug/msg00000.html; http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html; http://support.apple.com/kb/HT4723
CVE: CVE-2011-0212
Published: 2011-06-24
Description: servermgrd in Apple Mac OS X before 10.6.8 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML-RPC request containing an entity declaration in conjunction with an entity reference, related to an XML External Entity (aka XXE) issue.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html; http://support.apple.com/kb/HT4723; http://www.securityfocus.com/bid/48445
CVE: CVE-2011-0213
Published: 2011-06-24
Description: Buffer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-120
References: http://lists.apple.com/archives/security-announce/2011//Aug/msg00000.html; http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html; http://support.apple.com/kb/HT4723
CVE: CVE-2011-1132
Published: 2011-06-24
Description: The IPv6 implementation in the kernel in Apple Mac OS X before 10.6.8 allows local users to cause a denial of service (NULL pointer dereference and reboot) via vectors involving socket options.
CVSS Score: 4.9 (MEDIUM)
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html; http://support.apple.com/kb/HT4723
CVE: CVE-2011-1409
Published: 2011-06-24
Description: Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authentication and upload arbitrary files via a request that lacks an authentication ID.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://fex.rus.uni-stuttgart.de/fex.html; http://secunia.com/advisories/44940; http://www.debian.org/security/2011/dsa-2259
CVE: CVE-2011-1770
Published: 2011-06-24
Description: Integer underflow in the dccp_parse_options function (net/dccp/options.c) in the Linux kernel before 2.6.33.14 allows remote attackers to cause a denial of service via a Datagram Congestion Control Protocol (DCCP) packet with an invalid feature options length, which triggers a buffer over-read.
CVSS Score: 7.5 (HIGH)
CWE: CWE-191
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061236.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061366.html; http://marc.info/?l=linux-kernel&m=[PII_REDACTED]9036&w=2
CVE: CVE-2011-1908
Published: 2011-06-24
Description: Integer overflow in the Type 1 font decoder in the FreeType engine in Foxit Reader before 4.0.0.0619 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted font in a PDF document.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://www.foxitsoftware.com/products/reader/security_bulletins.php#freetype; http://www.microsoft.com/technet/security/advisory/msvr11-005.mspx; http://www.securityfocus.com/bid/48359
CVE: CVE-2011-2193
Published: 2011-06-24
Description: Multiple buffer overflows in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.x before 2.4.14, 2.5.x before 2.5.6, and 3.x before 3.0.2 allow (1) remote authenticated users to gain privileges via a long Job_Name field in a qsub command to the server, and might allow (2) local users to gain privileges via vectors involving a long host variable in pbs_iff.
CVSS Score: 8.5 (HIGH)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062638.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061645.html; http://secunia.com/advisories/45039
CVE: CVE-2011-2194
Published: 2011-06-24
Description: Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/44892; http://www.debian.org/security/2011/dsa-2257; http://www.securityfocus.com/bid/48171
CVE: CVE-2011-2484
Published: 2011-06-24
Description: The add_del_listener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service (memory and CPU consumption), and bypass the OOM Killer, via a crafted application.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://lists.openwall.net/linux-kernel/2011/06/16/605; http://openwall.com/lists/oss-security/2011/06/22/1; http://openwall.com/lists/oss-security/2011/06/22/2
CVE: CVE-2011-1332
Published: 2011-06-29
Description: Cross-site scripting (XSS) vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-6570.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://cybozu.co.jp/products/dl/notice/detail/0023.html; http://jvn.jp/en/jp/JVN59779256/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000044
CVE: CVE-2011-1333
Published: 2011-06-29
Description: Cross-site scripting (XSS) vulnerability in Cybozu Office 6 and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the bulletin board system."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://cybozu.co.jp/products/dl/notice/detail/0019.html; http://jvn.jp/en/jp/JVN80877328/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000045
CVE: CVE-2011-1334
Published: 2011-06-29
Description: Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the mail system."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://cybozu.co.jp/products/dl/notice/detail/0019.html; http://jvn.jp/en/jp/JVN54074460/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000046
CVE: CVE-2011-1335
Published: 2011-06-29
Description: Cross-site scripting (XSS) vulnerability in Cybozu Office 6, 7, and 8 before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "address book and user list functions."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://cs.cybozu.co.jp/information/20100816notice05.php; http://jvn.jp/en/jp/JVN55508059/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000047
CVE: CVE-2011-2180
Published: 2011-06-29
Description: Cross-site scripting (XSS) vulnerability in dereferer.php in A Really Simple Chat (ARSC) 3.3-rc2 allows remote attackers to inject arbitrary web script or HTML via the arsc_link parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.htbridge.ch/advisory/xss_in_a_really_simple_chat_arsc.html; http://www.openwall.com/lists/oss-security/2011/06/02/1; http://www.openwall.com/lists/oss-security/2011/06/02/7
CVE: CVE-2011-2181
Published: 2011-06-29
Description: Multiple SQL injection vulnerabilities in A Really Simple Chat (ARSC) 3.3-rc2 allow remote attackers to execute arbitrary SQL commands via the (1) arsc_user parameter to base/admin/edit_user.php, (2) arsc_layout_id parameter in base/admin/edit_layout.php, or (3) arsc_room parameter to base/admin/edit_room.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.htbridge.ch/advisory/multiple_sql_injections_in_a_really_simple_chat_arsc.html; http://www.openwall.com/lists/oss-security/2011/06/02/1; http://www.openwall.com/lists/oss-security/2011/06/02/7
CVE: CVE-2011-2204
Published: 2011-06-29
Description: Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive information by reading a log file.
CVSS Score: 1.9 (LOW)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8824&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2771&w=2
CVE: CVE-2011-2345
Published: 2011-06-29
Description: The NPAPI implementation in Google Chrome before 12.0.742.112 does not properly handle strings, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: http://code.google.com/p/chromium/issues/detail?id=77493; http://googlechromereleases.blogspot.com/2011/06/stable-channel-update_28.html; http://secunia.com/advisories/45097
CVE: CVE-2011-2346
Published: 2011-06-29
Description: Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG fonts.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=84355; http://googlechromereleases.blogspot.com/2011/06/stable-channel-update_28.html; http://secunia.com/advisories/45097
CVE: CVE-2011-2347
Published: 2011-06-29
Description: Google Chrome before 12.0.742.112 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://code.google.com/p/chromium/issues/detail?id=85003; http://googlechromereleases.blogspot.com/2011/06/stable-channel-update_28.html; http://secunia.com/advisories/45097
CVE: CVE-2011-2348
Published: 2011-06-29
Description: Google V8, as used in Google Chrome before 12.0.742.112, performs an incorrect bounds check, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://code.google.com/p/chromium/issues/detail?id=85177; http://googlechromereleases.blogspot.com/2011/06/stable-channel-update_28.html; http://secunia.com/advisories/45097
CVE: CVE-2011-2349
Published: 2011-06-29
Description: Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to text selection.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=85418; http://googlechromereleases.blogspot.com/2011/06/stable-channel-update_28.html; http://secunia.com/advisories/45097
CVE: CVE-2011-2350
Published: 2011-06-29
Description: The HTML parser in Google Chrome before 12.0.742.112 does not properly address "lifetime and re-entrancy issues," which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://code.google.com/p/chromium/issues/detail?id=85102; http://googlechromereleases.blogspot.com/2011/06/stable-channel-update_28.html; http://secunia.com/advisories/45097