Vulnerabilities > Google > Chrome > 17.0.963.82
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2012-03-30 | CVE-2011-3063 | Improper Input Validation vulnerability in Google Chrome Google Chrome before 18.0.1025.142 does not properly validate the renderer's navigation requests, which has unspecified impact and remote attack vectors. | 4.3 |
| 2012-03-30 | CVE-2011-3062 | Incorrect Calculation vulnerability in Google Chrome Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted OpenType file. | 6.8 |
| 2012-03-30 | CVE-2011-3061 | Improper Certificate Validation vulnerability in Google Chrome Google Chrome before 18.0.1025.142 does not properly check X.509 certificates before use of a SPDY proxy, which might allow man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate. | 5.8 |
| 2012-03-30 | CVE-2011-3060 | Out-Of-Bounds Read vulnerability in Google Chrome Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. | 6.8 |
| 2012-03-30 | CVE-2011-3059 | Out-Of-Bounds Read vulnerability in Google Chrome Google Chrome before 18.0.1025.142 does not properly handle SVG text elements, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. | 6.8 |
| 2012-03-30 | CVE-2011-3058 | Cross-Site Scripting vulnerability in Google Chrome Google Chrome before 18.0.1025.142 does not properly handle the EUC-JP encoding system, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors. | 4.3 |
| 2012-03-23 | CVE-2011-3049 | Multiple Security vulnerability in Google Chrome Google Chrome before 17.0.963.83 does not properly restrict the extension web request API, which allows remote attackers to cause a denial of service (disrupted system requests) via a crafted extension. | 5.0 |
| 2012-03-22 | CVE-2011-3057 | Out-Of-Bounds Read vulnerability in Google Chrome Google V8, as used in Google Chrome before 17.0.963.83, allows remote attackers to cause a denial of service via vectors that trigger an invalid read operation. | 4.3 |
| 2012-03-22 | CVE-2011-3056 | Origin Validation Error vulnerability in Google Chrome Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe." | 6.8 |
| 2012-03-22 | CVE-2011-3055 | Missing Authentication for Critical Function vulnerability in Google Chrome The browser native UI in Google Chrome before 17.0.963.83 does not require user confirmation before an unpacked extension installation, which allows user-assisted remote attackers to have an unspecified impact via a crafted extension. | 4.3 |