National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

Search Results (Refine Search)

Search Parameters:
  • Contains Software Flaws (CVE)
  • CPE Product Version: cpe:/a:google:chrome:17.0.963.42
There are 1,395 matching records.
Displaying matches 1381 through 1395.
Vuln ID Summary CVSS Severity
CVE-2011-3967

Unspecified vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) via a crafted certificate.

Published: February 08, 2012; 11:10:29 PM -05:00
V2: 5.0 MEDIUM
CVE-2011-3966

Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to error handling for Cascading Style Sheets (CSS) token-sequence data.

Published: February 08, 2012; 11:10:29 PM -05:00
V2: 7.5 HIGH
CVE-2011-3965

Google Chrome before 17.0.963.46 does not properly check signatures, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.

Published: February 08, 2012; 11:10:28 PM -05:00
V2: 5.0 MEDIUM
CVE-2011-3964

Google Chrome before 17.0.963.46 does not properly implement the drag-and-drop feature, which makes it easier for remote attackers to spoof the URL bar via unspecified vectors.

Published: February 08, 2012; 11:10:28 PM -05:00
V2: 5.0 MEDIUM
CVE-2011-3963

Google Chrome before 17.0.963.46 does not properly handle PDF FAX images, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Published: February 08, 2012; 11:10:28 PM -05:00
V2: 5.0 MEDIUM
CVE-2011-3962

Google Chrome before 17.0.963.46 does not properly perform path clipping, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Published: February 08, 2012; 11:10:28 PM -05:00
V2: 5.0 MEDIUM
CVE-2011-3961

Race condition in Google Chrome before 17.0.963.46 allows remote attackers to execute arbitrary code via vectors that trigger a crash of a utility process.

Published: February 08, 2012; 11:10:28 PM -05:00
V2: 9.3 HIGH
CVE-2011-3960

Google Chrome before 17.0.963.46 does not properly decode audio data, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Published: February 08, 2012; 11:10:28 PM -05:00
V2: 5.0 MEDIUM
CVE-2011-3959

Buffer overflow in the locale implementation in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Published: February 08, 2012; 11:10:28 PM -05:00
V2: 7.5 HIGH
CVE-2011-3958

Google Chrome before 17.0.963.46 does not properly perform casts of variables during handling of a column span, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.

Published: February 08, 2012; 11:10:28 PM -05:00
V2: 6.8 MEDIUM
CVE-2011-3957

Use-after-free vulnerability in the garbage-collection functionality in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving PDF documents.

Published: February 08, 2012; 11:10:28 PM -05:00
V2: 7.5 HIGH
CVE-2011-3956

The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which might allow remote attackers to bypass the Same Origin Policy via a crafted extension.

Published: February 08, 2012; 11:10:28 PM -05:00
V2: 5.0 MEDIUM
CVE-2011-3955

Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors that trigger the aborting of an IndexedDB transaction.

Published: February 08, 2012; 11:10:28 PM -05:00
V2: 7.5 HIGH
CVE-2011-3954

Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) via vectors that trigger a large amount of database usage.

Published: February 08, 2012; 11:10:28 PM -05:00
V2: 5.0 MEDIUM
CVE-2011-3953

Google Chrome before 17.0.963.46 does not prevent monitoring of the clipboard after a paste event, which has unspecified impact and remote attack vectors.

Published: February 08, 2012; 11:10:28 PM -05:00
V2: 7.5 HIGH