Vulnerabilities > Google > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2010-11-17 | CVE-2010-4008 | Buffer Errors vulnerability in Google Chrome libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document. | 4.3 |
| 2010-11-15 | CVE-2010-0113 | Credentials Management vulnerability in Symantec Mobile Security 1.0 The Symantec Norton Mobile Security application 1.0 Beta for Android records setup details, possibly including wipe/lock credentials, in the device logs, which allows user-assisted remote attackers to obtain potentially sensitive information by leveraging the ability of a separate crafted application to read these logs. | 4.3 |
| 2010-11-09 | CVE-2010-4214 | Cryptographic Issues vulnerability in Wellsfargo Wells Fargo Mobile 1.1 The Wells Fargo Mobile application 1.1 for Android stores a username and password, along with account balances, in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data. | 4.3 |
| 2010-11-09 | CVE-2010-4213 | Cryptographic Issues vulnerability in Bankofamerica Bank of America 2.12 The Bank of America application 2.12 for Android stores a security question's answer in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data. | 4.3 |
| 2010-11-06 | CVE-2010-4206 | Out-Of-Bounds Write vulnerability in Google Chrome Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted SVG document, related to effects in the application of filters. | 6.8 |
| 2010-11-06 | CVE-2010-4199 | Improper Input Validation vulnerability in Google Chrome Google Chrome before 7.0.517.44 does not properly perform a cast of an unspecified variable during processing of an SVG use element, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SVG document. | 6.8 |
| 2010-11-06 | CVE-2010-4198 | Improper Input Validation vulnerability in Google Chrome WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, does not properly handle large text areas, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted HTML document. | 6.8 |
| 2010-10-21 | CVE-2010-4040 | Improper Input Validation vulnerability in Google Chrome Google Chrome before 7.0.517.41 does not properly handle animated GIF images, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted image. | 6.8 |
| 2010-10-21 | CVE-2010-4038 | Improper Resource Shutdown OR Release vulnerability in Google Chrome The Web Sockets implementation in Google Chrome before 7.0.517.41 does not properly handle a shutdown action, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors. | 5.0 |
| 2010-10-21 | CVE-2010-4037 | Multiple Security vulnerability in Google Chrome prior to 7.0.517.41 Unspecified vulnerability in Google Chrome before 7.0.517.41 allows remote attackers to bypass the pop-up blocker via unknown vectors. network google | 4.3 |