CVE-2011-3061

Google Chrome before 18.0.1025.142 does not properly check X.509 certificates before use of a SPDY proxy, which might allow man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate...

CVE-2011-3062

Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted OpenType file...

CVE-2011-3065

Skia, as used in Google Chrome before 18.0.1025.142, allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

CVE-2011-3060

Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2011-3062

Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted OpenType file...

CVE-2011-3060

CVE-2011-3060 affects Google Chrome (pre-18.0.1025.142). The issue is a vulnerability in how text fragments are handled, leading to an out-of-bounds read and potential denial of service. The description specifies the vector as unspecified and does not provide exploitation details. The available i...

CVE-2011-3063

CVE-2011-3063 relates to Google Chrome/Chromium where the renderer’s navigation requests were not properly validated. The initial CVE description states the impact is unspecified. Connected advisories (OpenVAS/Gentoo GLSA and Chrome vulnerability bundles) corroborate that CVE-2011-3063 is among m...

CVE-2011-3062

CVE-2011-3062 : An off-by-one error in the OpenType Sanitizer used by Google Chrome prior to 18.0.1025.142 allows remote attackers to cause a denial of service or possibly other impact via a crafted OpenType file. The MiracleLinux/OpenSUSE/Oracle Solaris advisories reference this CVE as part of C...

CVE-2011-3065

CVE-2011-3065 : Skia in Google Chrome (before 18.0.1025.142) allows remote attackers to cause memory corruption and possibly other impact via unknown vectors. Outcome described as memory corruption/DoS with unspecified additional effects. Mitigation: upgrade Chrome to version 18.0.1025.142 or new...

CVE-2011-3063

Removed by vendor...

CVE-2011-3059

Google Chrome prior to 18.0.1025.142 is affected by CVE-2011-3059, an out-of-bounds read in SVG text handling that can be exploited remotely to cause a denial of service. The vulnerability stems from improper handling of SVG text elements in the browser’s rendering pipeline. Practical impact repo...

CVE-2011-3064

Removed by vendor...

CVE-2011-3064

CVE-2011-3064 is a use-after-free in Google Chrome before 18.0.1025.142 related to SVG clipping. This could allow a remote attacker to cause a denial of service and possibly other unspecified impacts by abusing SVG clipping handling. Affected software: Google Chrome (pre-18.0.1025.142). Root caus...

CVE-2011-3063

Google Chrome before 18.0.1025.142 does not properly validate the renderer's navigation requests, which has unspecified impact and remote attack vectors...

CVE-2011-3058

Google Chrome pre-18.0.1025.142 has a vulnerability where improper handling of EUC-JP encoding can permit remote cross-site scripting (XSS) via unspecified vectors. The description specifies the affected version range and the exploit could be triggered remotely through EUC-JP-encoded inputs, lead...

CVE-2011-3061

Google Chrome up to 18.0.1025.142 is affected by CVE-2011-3061 due to improper verification of X.509 certificates before using a SPDY proxy, which could enable MITM or leakage of sensitive information via a crafted certificate. Root cause: SPDY proxy certificate checking error. Mitigation, per th...

CVE-2011-3064

Use-after-free vulnerability in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG clipping...

VMSA-2012-0006 : VMware Workstation, ESXi, and ESX address several security issues

a. VMware ROM Overwrite Privilege Escalation A flaw in the way port-based I/O is handled allows for modifying Read-Only Memory that belongs to the Virtual DOS Machine. Exploitation of this issue may lead to privilege escalation on Guest Operating Systems that run Windows 2000, Windows XP 32-bit,...

HITB2011KUL - Skype Vulnerabilities 0Day Exploitation

Document Title: =============== HITB2011KUL - Skype Vulnerabilities 0Day Exploitation References: =========== Download: http://www.vulnerability-lab.com/resources/videos/394.wmv View: http://www.youtube.com/watch?v=K4g86hVQ1wk Release Date: ============= 2012-03-30 Vulnerability Laboratory ID...

Intuit Help System Heap Corruption / Memory Leak

Intuit Help System Protocol URL Heap Corruption and Memory Leak Derek Soeder [email protected] Reported to [email protected] on March 15, 2012; vendor did not respond. Reported to CERT on March 22, 2012; vendor did not respond. Responsible disclosure failed with error code 10060. Published:...