Vulnerabilities > Google > Chrome > 4.0.249.59

DATE CVE VULNERABILITY TITLE RISK
2010-10-21 CVE-2010-4038 Improper Resource Shutdown OR Release vulnerability in Google Chrome
The Web Sockets implementation in Google Chrome before 7.0.517.41 does not properly handle a shutdown action, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
network
low complexity
google CWE-404
5.0
2010-10-21 CVE-2010-4037 Multiple Security vulnerability in Google Chrome prior to 7.0.517.41
Unspecified vulnerability in Google Chrome before 7.0.517.41 allows remote attackers to bypass the pop-up blocker via unknown vectors.
network
google
4.3
2010-10-21 CVE-2010-4036 Improper Input Validation vulnerability in Google Chrome
Google Chrome before 7.0.517.41 does not properly handle the unloading of a page, which allows remote attackers to spoof URLs via unspecified vectors.
network
google CWE-20
6.8
2010-10-21 CVE-2010-4035 Improper Input Validation vulnerability in Google Chrome
Google Chrome before 7.0.517.41 does not properly perform autofill operations for forms, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document.
network
google CWE-20
critical
9.3
2010-10-21 CVE-2010-4034 Improper Input Validation vulnerability in Google Chrome
Google Chrome before 7.0.517.41 does not properly handle forms, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document.
network
google CWE-20
critical
9.3
2010-10-21 CVE-2010-4033 Multiple Security vulnerability in Google Chrome prior to 7.0.517.41
Google Chrome before 7.0.517.41 does not properly implement the autofill and autocomplete functionality, which allows remote attackers to conduct "profile spamming" attacks via unspecified vectors.
network
low complexity
google
5.0
2010-10-05 CVE-2010-3730 Remote Security vulnerability in Chrome
Google Chrome before 6.0.472.62 does not properly use information about the origin of a document to manage properties, which allows remote attackers to have an unspecified impact via a crafted web site, related to a "property pollution" issue.
network
google
6.8
2010-10-05 CVE-2010-3729 Integer Overflow OR Wraparound vulnerability in Google Chrome
The SPDY protocol implementation in Google Chrome before 6.0.472.62 does not properly manage buffers, which might allow remote attackers to execute arbitrary code via unspecified vectors.
network
low complexity
google CWE-190
7.5
2010-10-04 CVE-2010-1822 Incorrect Type Conversion OR Cast vulnerability in multiple products
WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3 and Google Chrome before 6.0.472.62, does not properly perform a cast of an unspecified variable, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an SVG element in a non-SVG document.
6.8
2010-09-24 CVE-2010-1825 USE After Free vulnerability in Google Chrome
Use-after-free vulnerability in WebKit, as used in Google Chrome before 6.0.472.59, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to nested SVG elements.
network
google CWE-416
critical
9.3