Information disclosure

Google V8, as used in Google Chrome before 14.0.835.163, does not properly restrict access to built-in objects, which has unspecified impact and remote attack vectors...

CVE-2011-2862

Google V8, as used in Google Chrome before 14.0.835.163, does not properly restrict access to built-in objects, which has unspecified impact and remote attack vectors...

Type confusion

Google V8, as used in Google Chrome before 14.0.835.163, does not properly perform object sealing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."...

Design/Logic Flaw

Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

CVE-2011-2856

Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

Design/Logic Flaw

Off-by-one error in Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2011-2852

Off-by-one error in Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2011-2875

Google V8, as used in Google Chrome before 14.0.835.163, does not properly perform object sealing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."...

Google Chrome < 14.0.835.163 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 14.0.835.163 and is affected by multiple vulnerabilities: - A race condition exists related to the certificate cache. Issue 49377 - The Windows Media Player plugin allows click-free access to the system Flash. Issue 51464 -...

CVE-2011-2875

CVE-2011-2875 affects Google Chrome’s V8 engine prior to version 14.0.835.163, where improper object sealing leads to type confusion. This can allow remote attackers to cause a denial of service and potentially other unspecified impacts. Remediation is to update Chrome to 14.0.835.163 or later (a...

CVE-2011-2862

Removed by vendor...

CVE-2011-2852

Removed by vendor...

CVE-2011-2875

Google V8, as used in Google Chrome before 14.0.835.163, does not properly perform object sealing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."...

CVE-2011-2862

Google V8, as used in Google Chrome before 14.0.835.163, does not properly restrict access to built-in objects, which has unspecified impact and remote attack vectors...

CVE-2011-2852

The CVE-2011-2852 entry concerns Google Chrome's V8 engine, where an Off-by-one error in V8 (as shipped in Chrome prior to 14.0.835.163) may allow a remote attacker to cause a denial of service or potentially other impact via unknown vectors. Affected product/component: Google Chrome using V8. Ro...

CVE-2011-2862

CVE-2011-2862 concerns Google V8 in Chrome before 14.0.835.163, where access to built-in objects is not properly restricted. Affected software is the V8 engine as used by Chrome; root cause and precise impact are not detailed in the provided documents. No exploitation details are given here, and ...

CVE-2011-2856

CVE-2011-2856 involves Google Chrome/Chromium’s V8 engine. The vulnerability allows remote attackers to bypass the Same Origin Policy via unspecified vectors in Google V8 used by Chrome before 14.0.835.163. Impact is exposure of cross-origin data and potential manipulation of web content; exploit...

CVE-2011-2875

Removed by vendor...

CVE-2011-2856

Removed by vendor...

CVE-2011-2852

Off-by-one error in Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...