Vulnerabilities > Google > Chrome > 2.0.169.1

DATE CVE VULNERABILITY TITLE RISK
2009-08-27 CVE-2009-2973 Cryptographic Issues vulnerability in Google Chrome
Google Chrome before 2.0.172.43 does not prevent SSL connections to a site with an X.509 certificate signed with the (1) MD2 or (2) MD4 algorithm, which makes it easier for man-in-the-middle attackers to spoof arbitrary HTTPS servers via a crafted certificate, a related issue to CVE-2009-2409.
network
low complexity
google CWE-310
6.4
2009-08-27 CVE-2009-2935 Permissions, Privileges, and Access Controls vulnerability in Google Chrome
Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript.
network
low complexity
google CWE-264
critical
10.0
2009-08-11 CVE-2009-2416 Use After Free vulnerability in multiple products
Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service (application crash) via crafted (1) Notation or (2) Enumeration attribute types in an XML file, as demonstrated by the Codenomicon XML fuzzing framework.
6.5
2009-07-21 CVE-2009-2556 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Google Chrome
Google Chrome before 2.0.172.37 allows attackers to leverage renderer access to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger excessive memory allocation.
network
google CWE-119
critical
9.3
2009-07-21 CVE-2009-2555 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Google Chrome and V8
Heap-based buffer overflow in src/jsregexp.cc in Google V8 before 1.1.10.14, as used in Google Chrome before 2.0.172.37, allows remote attackers to execute arbitrary code in the Chrome sandbox via a crafted JavaScript regular expression.
network
google CWE-119
critical
9.3
2009-06-23 CVE-2009-2121 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Google Chrome
Buffer overflow in the browser kernel in Google Chrome before 2.0.172.33 allows remote HTTP servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted response.
network
google CWE-119
critical
9.3