) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
- CPE Product Version: cpe:/a:google:chrome:14.0.795.0
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2011-2847 |
Use-after-free vulnerability in the document loader in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document. Published: September 19, 2011; 8:02:55 AM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2011-2846 |
Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to unload event handling. Published: September 19, 2011; 8:02:55 AM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2011-2844 |
Google Chrome before 14.0.835.163 does not properly process MP3 files, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. Published: September 19, 2011; 8:02:55 AM -0400 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
| CVE-2011-2843 |
Google Chrome before 14.0.835.163 does not properly handle media buffers, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. Published: September 19, 2011; 8:02:55 AM -0400 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
| CVE-2011-2842 |
The installer in Google Chrome before 14.0.835.163 on Mac OS X does not properly handle lock files, which has unspecified impact and attack vectors. Published: September 19, 2011; 8:02:55 AM -0400 |
V3.x:(not available) V2.0: 7.5 HIGH |
| CVE-2011-2841 |
Google Chrome before 14.0.835.163 does not properly perform garbage collection during the processing of PDF documents, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document. Published: September 19, 2011; 8:02:55 AM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2011-2840 |
Google Chrome before 14.0.835.163 allows user-assisted remote attackers to spoof the URL bar via vectors related to "unusual user interaction." Published: September 19, 2011; 8:02:55 AM -0400 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
| CVE-2011-2838 |
Google Chrome before 14.0.835.163 does not properly consider the MIME type during the loading of a plug-in, which has unspecified impact and remote attack vectors. Published: September 19, 2011; 8:02:55 AM -0400 |
V3.x:(not available) V2.0: 7.5 HIGH |
| CVE-2011-2837 |
Google Chrome before 14.0.835.163 on Linux does not use the PIC and PIE compiler options for position-independent code, which has unspecified impact and attack vectors. Published: September 19, 2011; 8:02:55 AM -0400 |
V3.x:(not available) V2.0: 7.5 HIGH |
| CVE-2011-2836 |
Google Chrome before 14.0.835.163 does not require Infobar interaction before use of the Windows Media Player plug-in, which makes it easier for remote attackers to have an unspecified impact via crafted Flash content. Published: September 19, 2011; 8:02:55 AM -0400 |
V3.x:(not available) V2.0: 7.5 HIGH |
| CVE-2011-2835 |
Race condition in Google Chrome before 14.0.835.163 allows attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the certificate cache. Published: September 19, 2011; 8:02:55 AM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2011-2834 |
Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling. Published: September 19, 2011; 8:02:55 AM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |