4.0.223.5 : Security Vulnerabilities (Gain Information)

Cpe Name:cpe:/a:google:chrome:4.0.223.5

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : Cve Number Descending Cve Number Ascending CVSS Score Descending Number Of Exploits Descending

Copy Results Download Results Select Table

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2011-3061	20	+Info	2012-03-30	2013-02-14	5.8	None	Remote	Medium	Not required	Partial	Partial	None
Google Chrome before 18.0.1025.142 does not properly check X.509 certificates before use of a SPDY proxy, which might allow man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate.
2	CVE-2011-3022	200	+Info	2012-02-16	2012-08-13	5.0	None	Remote	Low	Not required	Partial	None	None
translate/translate_manager.cc in Google Chrome before 17.0.963.56 and 19.x before 19.0.1036.7 uses an HTTP session to exchange data for translation, which allows remote attackers to obtain sensitive information by sniffing the network.
3	CVE-2011-2800	200	+Info	2011-08-02	2011-10-25	4.3	None	Remote	Medium	Not required	Partial	None	None
Google Chrome before 13.0.782.107 allows remote attackers to obtain potentially sensitive information about client-side redirect targets via a crafted web site.
4	CVE-2011-2784	200	+Info	2011-08-02	2011-09-06	5.0	None	Remote	Low	Not required	Partial	None	None
Google Chrome before 13.0.782.107 allows remote attackers to obtain sensitive information via a request for the GL program log, which reveals a local path in an unspecified log entry.
5	CVE-2011-1810	264	+Info	2011-06-09	2012-01-26	5.0	None	Remote	Low	Not required	Partial	None	None
The Cascading Style Sheets (CSS) implementation in Google Chrome before 12.0.742.91 does not properly restrict access to the visit history, which allows remote attackers to obtain sensitive information via unspecified vectors.
6	CVE-2011-1202		+Info	2011-03-10	2013-04-18	5.0	None	Remote	Low	Not required	Partial	None	None
The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.
7	CVE-2011-0776	200	+Info	2011-02-04	2012-01-26	5.0	None	Remote	Low	Not required	Partial	None	None
The sandbox implementation in Google Chrome before 9.0.597.84 on Mac OS X might allow remote attackers to obtain potentially sensitive information about local files via vectors related to the stat system call.
8	CVE-2010-5073	264	+Info	2011-12-07	2012-01-26	5.0	None	Remote	Low	Not required	Partial	None	None
The JavaScript implementation in Google Chrome 4 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method. NOTE: this may overlap CVE-2010-5070.
9	CVE-2010-5069	200	+Info	2011-12-07	2012-01-26	4.3	None	Remote	Medium	Not required	Partial	None	None
The Cascading Style Sheets (CSS) implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document. NOTE: this may overlap CVE-2010-2264.
10	CVE-2010-3417	200	+Info	2010-09-16	2011-07-18	5.0	None	Remote	Low	Not required	Partial	None	None
Google Chrome before 6.0.472.59 does not prompt the user before granting access to the extension history, which allows attackers to obtain potentially sensitive information via unspecified vectors.
11	CVE-2010-3118	200	+Info	2010-08-24	2011-07-18	5.0	None	Remote	Low	Not required	Partial	None	None
The autosuggest feature in the Omnibox implementation in Google Chrome before 5.0.375.127 does not anticipate entry of passwords, which might allow remote attackers to obtain sensitive information by reading the network traffic generated by this feature.
12	CVE-2010-2899		+Info	2010-07-28	2011-07-18	5.0	None	Remote	Low	Not required	Partial	None	None
Unspecified vulnerability in the layout implementation in Google Chrome before 5.0.375.125 allows remote attackers to obtain sensitive information from process memory via unknown vectors.
13	CVE-2010-1851	200	+Info	2010-05-07	2011-07-18	4.3	None	Remote	Medium	Not required	Partial	None	None
Google Chrome, when the Invisible Hand extension is enabled, uses cookies during background HTTP requests in a possibly unexpected manner, which might allow remote web servers to identify specific persons and their product searches via HTTP request logging, related to a "cross-site data leakage" issue.
14	CVE-2010-1773	189	DoS Exec Code Mem. Corr. +Info	2010-09-24	2011-07-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Off-by-one error in the toAlphabetic function in rendering/RenderListMarker.cpp in WebCore in WebKit before r59950, as used in Google Chrome before 5.0.375.70, allows remote attackers to obtain sensitive information, cause a denial of service (memory corruption and application crash), or possibly execute arbitrary code via vectors related to list markers for HTML lists, aka rdar problem 8009118.
15	CVE-2010-1230	200	+Info	2010-04-01	2012-01-26	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Google Chrome before 4.1.249.1036 does not have the expected behavior for attempts to delete Web SQL Databases and clear the Strict Transport Security (STS) state, which has unspecified impact and attack vectors.

Total number of vulnerabilities : 15 Page : 1 (This Page)