GLSA-201203-08 : libxslt: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201203-08 libxslt: Denial of Service An out of bounds read error has been found in libxslt/pattern.c in libxslt. Impact : A remote attacker could entice a user to process an XML file using a specially crafted XSLT stylesheet in an...

FreeBSD : chromium -- multiple vulnerabilities (99aef698-66ed-11e1-8288-00262d5ed8ee)

Google Chrome Releases reports : 105867 High CVE-2011-3031: Use-after-free in v8 element wrapper. Credit to Chamal de Silva. 108037 High CVE-2011-3032: Use-after-free in SVG value handling. Credit to Arthur Gerkis. 108406 115471 High CVE-2011-3033: Buffer overflow in the Skia drawing library...

CVE-2011-3042

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of table sections...

CVE-2011-3035

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG use elements...

CVE-2011-3040

Google Chrome before 17.0.963.65 does not properly handle text, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted document...

CVE-2011-3041

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of class attributes...

CVE-2011-3034

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving an SVG document...

CVE-2011-3041

CVE-2011-3041 is a use-after-free vulnerability in class attribute handling within Chromium/Chrome components. The openSUSE security update (openSUSE-SU-2012:0374-1) explicitly lists High CVE-2011-3041 and attributes the issue to use-after-free in class attribute handling, with remediation in the...

CVE-2011-3031

CVE-2011-3031 is a use-after-free in Google V8's element wrapper, affecting Chrome prior to 17.0.963.65. The vulnerability could cause a denial of service or possibly other impact via unknown vectors. Publicly documented mitigations include updates in Chromium/OpenSUSE (openSUSE-SU-2012:0374-1) a...

CVE-2011-3044

CVE-2011-3044 affects Google Chrome prior to 17.0.963.65. The vulnerability is a use-after-free in SVG animation elements, allowing remote attackers to trigger a denial of service (and potentially other impacts) via SVG animation vectors. Mitigation provided in the Chrome update to version 17.0.9...

CVE-2011-3034

CVE-2011-3034 is a use-after-free in SVG document handling in Google Chrome up to version 17.0.963.65, potentially causing a remote denial of service (and possibly other impact) via SVG vectors. The connected documents confirm the CVE is referenced in Chrome’s 2012 updates, and show related patch...

CVE-2011-3031

Removed by vendor...

CVE-2011-3043

CVE-2011-3043 is a use-after-free vulnerability in Chrome’s handling of flexbox with floats. OpenSUSE OpenVAS/NASL data references this CVE as part of the Chromium v8 security fixes in openSUSE-SU-2012:0374-1, with the patch described as updating Chromium to 19.0.1066 (and related fixes). The vul...

CVE-2011-3035

CVE-2011-3035 concerns a use-after-free in SVG use handling in Google Chrome up to version before 17.0.963.65. The vulnerability could allow a remote attacker to cause a denial of service or potentially other impact via SVG use element vectors. Public references in the provided documents corrobor...

CVE-2011-3032

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of SVG values...

CVE-2011-3033

CVE-2011-3033 : A buffer overflow in Skia, used by Chromium/Chrome, can lead to a crash or potentially other impact. Affected: Chromium-based browsers. Root cause: overflow in Skia drawing library. Impact: remote crash/possible further effects as described in disclosures. Remediation: upgrade to ...

CVE-2011-3039

CVE-2011-3039 affects Google Chrome prior to 17.0.963.65, with a use-after-free in quote handling that can lead to denial of service and potentially other impact. The vulnerability is triggered via quote handling vectors in the browser’s rendering/JavaScript context. Public references in connecte...

CVE-2011-3039

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to quote handling...

CVE-2011-3040

Google Chrome before 17.0.963.65 is affected by CVE-2011-3040 due to improper handling of text, enabling a remote attacker to cause a denial of service via a crafted document (out-of-bounds read). The vulnerability is addressed by updating to Chrome 17.0.963.65 or later (per the public Chrome upd...

CVE-2011-3037

Google Chrome before 17.0.963.65 is affected by CVE-2011-3037: Bad casts in anonymous block splitting, caused by improper casting of variables during analysis of documents. The vulnerability allows a remote attacker to cause a denial of service or potentially other impact via a crafted document. ...