Double free

Double free vulnerability in the sndseqossopen function in sound/core/seq/oss/seqossinit.c in the Linux kernel before 2.6.36-rc4 might allow local users to cause a denial of service or possibly have unspecified other impact via an unsuccessful attempt to open the /dev/sequencer device...

CVE-2010-3412

Race condition in the console implementation in Google Chrome before 6.0.472.59 has unspecified impact and attack vectors...

Race condition

Race condition in the console implementation in Google Chrome before 6.0.472.59 has unspecified impact and attack vectors...

CVE-2010-3412

Race condition in the console implementation in Google Chrome before 6.0.472.59 has unspecified impact and attack vectors...

CVE-2010-3414

The CVE-2010-3414 issue affects Google Chrome on Mac OS X prior to 6.0.472.59, where an incorrect fix for CVE-2010-3112 left file dialogs vulnerable. The root cause is tied to that fix, enabling memory corruption leading to potential denial of service and unspecified impact via unknown vectors. R...

CVE-2010-2960

The keyctlsessiontoparent function in security/keys/keyctl.c in the Linux kernel 2.6.35.4 and earlier expects that a certain parent session keyring exists, which allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via...

CVE-2010-3248

Google Chrome before 6.0.472.53 does not properly restrict copying to the clipboard, which has unspecified impact and attack vectors...

Memory corruption

The implementation of notification permissions in Google Chrome before 6.0.472.53 allows attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

CVE-2010-3255

Removed by vendor...

Memory corruption

Google Chrome before 5.0.375.127 does not properly implement file dialogs, which allows attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

CVE-2010-3119

Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

Memory corruption

Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

Memory corruption

Google Chrome before 5.0.375.127, and webkitgtk before 1.2.5, does not properly handle SVG documents, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors related to state changes when using DeleteButtonControll...

CVE-2010-3112

Removed by vendor...

Format string

Red Hat libvirt, possibly 0.6.1 through 0.8.2, looks up disk backing stores without referring to the user-defined main disk format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors...

Design/Logic Flaw

Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors...

CVE-2010-1386: Undefined Security Weakness

page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357...

CVE-2010-2238

Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors...

CVE-2010-2971

CVE-2010-2971 concerns the libmikmod loader load_it.c, where a mismatch in handling name##env versus name##tick/name##node can cause a buffer over-read when processing Impulse Tracker files. The issue is a follow-up to CVE-2009-3995, with the CVE details noting a remote attacker could trigger the...

CVE-2010-2540

mapserv.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 does not properly restrict the use of CGI command-line arguments that were intended for debugging, which allows remote attackers to have an unspecified impact via crafted arguments...