Design/Logic Flaw

Google Chrome OS before R12 0.12.433.38 Beta allows local users to gain privileges by creating a /var/lib/chromeos-aliases.conf file and placing commands in it...

CVE-2011-2169

Summary: CVE-2011-2169 affects Google Chrome OS prior to R12 0.12.433.38 Beta. Vulnerability: Local privilege escalation via a misused /var/lib/chromeos-aliases.conf file, where an attacker can place commands that are executed with elevated privileges by a local user. Root cause/impact: The descr...

CVE-2011-2171

Technical details for CVE-2011-2171 are not publicly provided in the supplied documents. The Connected records do not specify affected product/version, root cause, impact, or remediation. Monitor for updates from official sources.

CVE-2011-2171

Unspecified vulnerability in the dbugs package in Google Chrome OS before R12 0.12.433.38 Beta has unknown impact and attack vectors...

CVE-2011-2170

Google Chrome OS before R12 0.12.433.38 Beta, when Guest mode is enabled, does not prevent changes on the about:flags page, which has unspecified impact and local attack vectors...

CVE-2011-2170

CVE-2011-2170 affects Google Chrome OS prior to R12 0.12.433.38 Beta. When Guest mode is enabled, users can alter settings on the about:flags page, with impact described as unspecified and local attack vectors; no explicit exploitation path or affected versions beyond this line are detailed in th...

CVE-2011-2169

Google Chrome OS before R12 0.12.433.38 Beta allows local users to gain privileges by creating a /var/lib/chromeos-aliases.conf file and placing commands in it...

CVE-2011-1306

Unspecified vulnerability in the Scratchpad application in Google Chrome OS before R10 0.10.156.46 Beta has unknown impact and attack vectors...

Code injection

Unspecified vulnerability in the Scratchpad application in Google Chrome OS before R10 0.10.156.46 Beta has unknown impact and attack vectors...

CVE-2011-1306

Unspecified vulnerability in the Scratchpad application in Google Chrome OS before R10 0.10.156.46 Beta has unknown impact and attack vectors...

CVE-2011-1306

Technical details about CVE-2011-1306 are not publicly available in the provided documents; no specifics on vulnerable component, impact, or remediation are provided. Monitor for updates.

CVE-2011-1042

Use-after-free vulnerability in flimflamd in flimflam in Google Chrome OS before 0.9.130.14 Beta allows user-assisted remote attackers to cause a denial of service daemon crash by providing the name of a hidden WiFi network that does not respond to connection attempts...

Design/Logic Flaw

Use-after-free vulnerability in flimflamd in flimflam in Google Chrome OS before 0.9.130.14 Beta allows user-assisted remote attackers to cause a denial of service daemon crash by providing the name of a hidden WiFi network that does not respond to connection attempts...

CVE-2011-1042

Affected software: Google Chrome OS (flimflam/flimflamd) prior to 0.9.130.14 Beta. Vulnerability: use-after-free in the network daemon that can be triggered by a crafted hidden Wi‑Fi network name, enabling user-assisted remote denial of service (daemon crash). Impact: partial availability loss of...

CVE-2011-1042

Use-after-free vulnerability in flimflamd in flimflam in Google Chrome OS before 0.9.130.14 Beta allows user-assisted remote attackers to cause a denial of service daemon crash by providing the name of a hidden WiFi network that does not respond to connection attempts...

CVE-2011-0485

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle speech data, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "stale pointer."...

CVE-2011-0484

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform DOM node removal, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale rendering node."...

CVE-2011-0482

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of anchors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted HTML document...

CVE-2011-0479

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly interact with extensions, which allows remote attackers to cause a denial of service via a crafted extension that triggers an uninitialized pointer...

CVE-2011-0483

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of video, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...