Lucene search

K
freebsdFreeBSD68AC6266-25C3-11E1-B63A-00262D5ED8EE
HistoryDec 13, 2011 - 12:00 a.m.

chromium -- multiple vulnerabilities

2011-12-1300:00:00
vuxml.freebsd.org
7

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.03 Low

EPSS

Percentile

89.8%

Google Chrome Releases reports:

[81753] Medium CVE-2011-3903: Out-of-bounds read in regex
matching. Credit to David Holloway of the Chromium development
community.
[95465] Low CVE-2011-3905: Out-of-bounds reads in libxml. Credit to
Google Chrome Security Team (Inferno).
[98809] Medium CVE-2011-3906: Out-of-bounds read in PDF parser.
Credit to Aki Helin of OUSPG.
[99016] High CVE-2011-3907: URL bar spoofing with view-source.
Credit to Mitja Kolsek of ACROS Security.
[100863] Low CVE-2011-3908: Out-of-bounds read in SVG parsing.
Credit to Aki Helin of OUSPG.
[101010] Medium CVE-2011-3909: [64-bit only] Memory corruption in
CSS property array. Credit to Google Chrome Security Team
(scarybeasts) and Chu.
[101494] Medium CVE-2011-3910: Out-of-bounds read in YUV video
frame handling. Credit to Google Chrome Security Team (Cris
Neckar).
[101779] Medium CVE-2011-3911: Out-of-bounds read in PDF. Credit to
Google Chrome Security Team (scarybeasts) and Robert Swiecki of
the Google Security Team.
[102359] High CVE-2011-3912: Use-after-free in SVG filters. Credit
to Arthur Gerkis.
[103921] High CVE-2011-3913: Use-after-free in Range handling.
Credit to Arthur Gerkis.
[104011] High CVE-2011-3914: Out-of-bounds write in v8 i18n
handling. Credit to Slawomir Blazek.
[104529] High CVE-2011-3915: Buffer overflow in PDF font handling.
Credit to Atte Kettunen of OUSPG.
[104959] Medium CVE-2011-3916: Out-of-bounds reads in PDF cross
references. Credit to Atte Kettunen of OUSPG.
[105162] Medium CVE-2011-3917: Stack-buffer-overflow in FileWatcher.
Credit to Google Chrome Security Team (Marty Barbella).
[107258] High CVE-2011-3904: Use-after-free in bidi handling.
Credit to Google Chrome Security Team (Inferno) and miaubiz.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchchromium< 16.0.912.63UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.03 Low

EPSS

Percentile

89.8%