Google Chrome vulnerabilities

CVE-2011-3961 [CRITICAL] CWE-362 CVE-2011-3961: Race condition in Google Chrome before 17.0.963.46 allows remote attackers to execute arbitrary code Race condition in Google Chrome before 17.0.963.46 allows remote attackers to execute arbitrary code via vectors that trigger a crash of a utility process.

CVE-2011-3966 [HIGH] CWE-416 CVE-2011-3966: Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to error handling for Cascading Style Sheets (CSS) token-sequence data.

CVE-2011-3955 [HIGH] CVE-2011-3955: Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application c Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors that trigger the aborting of an IndexedDB transaction.

CVE-2011-3957 [HIGH] CWE-416 CVE-2011-3957: Use-after-free vulnerability in the garbage-collection functionality in Google Chrome before 17.0.96 Use-after-free vulnerability in the garbage-collection functionality in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving PDF documents.

CVE-2011-3959 [HIGH] CWE-120 CVE-2011-3959: Buffer overflow in the locale implementation in Google Chrome before 17.0.963.46 allows remote attac Buffer overflow in the locale implementation in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVE-2011-3953 [HIGH] CVE-2011-3953: Google Chrome before 17.0.963.46 does not prevent monitoring of the clipboard after a paste event, w Google Chrome before 17.0.963.46 does not prevent monitoring of the clipboard after a paste event, which has unspecified impact and remote attack vectors.

CVE-2011-3970 [MEDIUM] CWE-125 CVE-2011-3970: libxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial of s libxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

CVE-2011-3967 [MEDIUM] CVE-2011-3967: Unspecified vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a den Unspecified vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) via a crafted certificate.

CVE-2011-3969 [MEDIUM] CWE-416 CVE-2011-3969: Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to layout of SVG documents.

CVE-2011-3963 [MEDIUM] CWE-125 CVE-2011-3963: Google Chrome before 17.0.963.46 does not properly handle PDF FAX images, which allows remote attack Google Chrome before 17.0.963.46 does not properly handle PDF FAX images, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

CVE-2011-3972 [MEDIUM] CWE-787 CVE-2011-3972: The shader translator implementation in Google Chrome before 17.0.963.46 allows remote attackers to The shader translator implementation in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

CVE-2011-3960 [MEDIUM] CWE-125 CVE-2011-3960: Google Chrome before 17.0.963.46 does not properly decode audio data, which allows remote attackers Google Chrome before 17.0.963.46 does not properly decode audio data, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

CVE-2011-3965 [MEDIUM] CWE-347 CVE-2011-3965: Google Chrome before 17.0.963.46 does not properly check signatures, which allows remote attackers t Google Chrome before 17.0.963.46 does not properly check signatures, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.

CVE-2011-3954 [MEDIUM] CWE-400 CVE-2011-3954: Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application c Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) via vectors that trigger a large amount of database usage.

CVE-2011-3964 [MEDIUM] CWE-20 CVE-2011-3964: Google Chrome before 17.0.963.46 does not properly implement the drag-and-drop feature, which makes Google Chrome before 17.0.963.46 does not properly implement the drag-and-drop feature, which makes it easier for remote attackers to spoof the URL bar via unspecified vectors.

CVE-2011-3958 [MEDIUM] CWE-416 CVE-2011-3958: Google Chrome before 17.0.963.46 does not properly perform casts of variables during handling of a c Google Chrome before 17.0.963.46 does not properly perform casts of variables during handling of a column span, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.

CVE-2011-3962 [MEDIUM] CWE-125 CVE-2011-3962: Google Chrome before 17.0.963.46 does not properly perform path clipping, which allows remote attack Google Chrome before 17.0.963.46 does not properly perform path clipping, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

CVE-2011-3968 [MEDIUM] CWE-416 CVE-2011-3968: Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving Cascading Style Sheets (CSS) token sequences.

CVE-2011-3956 [MEDIUM] CWE-346 CVE-2011-3956: The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which might allow remote attackers to bypass the Same Origin Policy via a crafted extension.

CVE-2011-3971 [MEDIUM] CWE-416 CVE-2011-3971: Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows user-assisted remote attacke Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to mousemove events.