Vulnerabilities > Suse > Suse Linux Enterprise Server > Critical

DATE CVE VULNERABILITY TITLE RISK
2010-06-15 CVE-2010-2297 Code Injection vulnerability in multiple products
rendering/FixedTableLayout.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an HTML document that has a large colspan attribute within a table.
network
google opensuse suse CWE-94
critical
9.3
2010-06-15 CVE-2010-2302 USE After Free vulnerability in multiple products
Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees, aka rdar problem 8007953.
network
low complexity
google opensuse suse CWE-416
critical
10.0
2010-06-11 CVE-2010-1770 Code Injection vulnerability in multiple products
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Apple Safari before 4.1 on Mac OS X 10.4, and Google Chrome before 5.0.375.70 does not properly handle a transformation of a text node that has the IBM1147 character set, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document containing a BR element, related to a "type checking issue."
9.3