# CVEs published 2011-03-11

42 CVEs were published on March 11, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4651](https://cve.now/CVE-2010-4651.md): Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbi (no CVSS)
- [CVE-2011-0157](https://cve.now/CVE-2011-0157.md): WebKit, as used in Apple iOS before 4.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption a (no CVSS)
- [CVE-2011-0158](https://cve.now/CVE-2011-0158.md): MobileSafari in Apple iOS before 4.3 does not properly implement application launching through URL handlers, which allows remote attackers t (no CVSS)
- [CVE-2011-0159](https://cve.now/CVE-2011-0159.md): The Safari Settings feature in Safari in Apple iOS 4.x before 4.3 does not properly implement the clearing of cookies during execution of th (no CVSS)
- [CVE-2011-0160](https://cve.now/CVE-2011-0160.md): WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle redirects in conjunction with HTTP Basic Authentic (no CVSS)
- [CVE-2011-0161](https://cve.now/CVE-2011-0161.md): WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle the Attr.style accessor, which allows remote attac (no CVSS)
- [CVE-2011-0162](https://cve.now/CVE-2011-0162.md): Wi-Fi in Apple iOS before 4.3 and Apple TV before 4.2 does not properly perform bounds checking for Wi-Fi frames, which allows remote attack (no CVSS)
- [CVE-2011-0163](https://cve.now/CVE-2011-0163.md): WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle unspecified "cached resources," which allows remot (no CVSS)
- [CVE-2011-0166](https://cve.now/CVE-2011-0166.md): The HTML5 drag and drop functionality in WebKit in Apple Safari before 5.0.4 allows user-assisted remote attackers to bypass the Same Origin (no CVSS)
- [CVE-2011-0167](https://cve.now/CVE-2011-0167.md): The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Policy, and force the upl (no CVSS)
- [CVE-2011-0169](https://cve.now/CVE-2011-0169.md): WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console.\_inspectorCommandLineAPI pr (no CVSS)
- [CVE-2011-0715](https://cve.now/CVE-2011-0715.md): The mod\_dav\_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a den (no CVSS)
- [CVE-2011-1418](https://cve.now/CVE-2011-1418.md): The stateless address autoconfiguration (aka SLAAC) functionality in the IPv6 networking implementation in Apple iOS before 4.3 and Apple TV (no CVSS)
- [CVE-2011-1290](https://cve.now/CVE-2011-1290.md): Integer overflow in WebKit, as used on the Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246, in Google Chrome before 1 (no CVSS)
- [CVE-2010-3609](https://cve.now/CVE-2010-3609.md): The extension parser in slp\_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol (no CVSS)
- [CVE-2011-0456](https://cve.now/CVE-2011-0456.md): webscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows remote attackers to execute arbitrary commands via unspecified ve (no CVSS)
- [CVE-2011-1137](https://cve.now/CVE-2011-1137.md): Integer overflow in the mod\_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service (memor (no CVSS)
- [CVE-2011-1416](https://cve.now/CVE-2011-1416.md): The Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246 allows attackers to read the contents of memory locations via unk (no CVSS)
- [CVE-2011-1417](https://cve.now/CVE-2011-1417.md): Integer overflow in QuickLook, as used in Apple Mac OS X before 10.6.7 and MobileSafari in Apple iOS before 4.2.7 and 4.3.x before 4.3.2, al (no CVSS)
- [CVE-2011-1185](https://cve.now/CVE-2011-1185.md): Google Chrome before 10.0.648.127 does not prevent (1) navigation and (2) close operations on the top location of a sandboxed frame, which h (no CVSS)
- [CVE-2011-1186](https://cve.now/CVE-2011-1186.md): Google Chrome before 10.0.648.127 on Linux does not properly handle parallel execution of calls to the print method, which might allow remot (no CVSS)
- [CVE-2011-1187](https://cve.now/CVE-2011-1187.md): Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error mes (no CVSS)
- [CVE-2011-1188](https://cve.now/CVE-2011-1188.md): Google Chrome before 10.0.648.127 does not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory (no CVSS)
- [CVE-2011-1189](https://cve.now/CVE-2011-1189.md): Google Chrome before 10.0.648.127 does not properly perform box layout, which allows remote attackers to cause a denial of service or possib (no CVSS)
- [CVE-2011-1190](https://cve.now/CVE-2011-1190.md): The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified (no CVSS)
- [CVE-2011-1191](https://cve.now/CVE-2011-1191.md): Use-after-free vulnerability in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unsp (no CVSS)
- [CVE-2011-1192](https://cve.now/CVE-2011-1192.md): Google Chrome before 10.0.648.127 on Linux does not properly handle Unicode ranges, which allows remote attackers to cause a denial of servi (no CVSS)
- [CVE-2011-1193](https://cve.now/CVE-2011-1193.md): Google V8, as used in Google Chrome before 10.0.648.127, allows remote attackers to bypass the Same Origin Policy via unspecified vectors. (no CVSS)
- [CVE-2011-1194](https://cve.now/CVE-2011-1194.md): Multiple unspecified vulnerabilities in Google Chrome before 10.0.648.127 allow remote attackers to bypass the pop-up blocker via unknown ve (no CVSS)
- [CVE-2011-1195](https://cve.now/CVE-2011-1195.md): Use-after-free vulnerability in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unsp (no CVSS)
- [CVE-2011-1196](https://cve.now/CVE-2011-1196.md): The OGG container implementation in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have (no CVSS)
- [CVE-2011-1197](https://cve.now/CVE-2011-1197.md): Google Chrome before 10.0.648.127 does not properly perform table painting, which allows remote attackers to cause a denial of service or po (no CVSS)
- [CVE-2011-1198](https://cve.now/CVE-2011-1198.md): The video functionality in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unspecifi (no CVSS)
- [CVE-2011-1199](https://cve.now/CVE-2011-1199.md): Google Chrome before 10.0.648.127 does not properly handle DataView objects, which allows remote attackers to cause a denial of service (app (no CVSS)
- [CVE-2011-1200](https://cve.now/CVE-2011-1200.md): Google Chrome before 10.0.648.127 does not properly perform a cast of an unspecified variable during text rendering, which allows remote att (no CVSS)
- [CVE-2011-1201](https://cve.now/CVE-2011-1201.md): The context implementation in WebKit, as used in Google Chrome before 10.0.648.127, allows remote attackers to cause a denial of service or (no CVSS)
- [CVE-2011-1202](https://cve.now/CVE-2011-1202.md): The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other pro (no CVSS)
- [CVE-2011-1203](https://cve.now/CVE-2011-1203.md): Google Chrome before 10.0.648.127 does not properly handle SVG cursors, which allows remote attackers to cause a denial of service or possib (no CVSS)
- [CVE-2011-1204](https://cve.now/CVE-2011-1204.md): Google Chrome before 10.0.648.127 does not properly handle attributes, which allows remote attackers to cause a denial of service (DOM tree (no CVSS)
- [CVE-2011-1285](https://cve.now/CVE-2011-1285.md): The regular-expression functionality in Google Chrome before 10.0.648.127 does not properly implement reentrancy, which allows remote attack (no CVSS)
- [CVE-2011-1286](https://cve.now/CVE-2011-1286.md): Google V8, as used in Google Chrome before 10.0.648.127, allows remote attackers to cause a denial of service or possibly have unspecified o (no CVSS)
- [CVE-2011-1413](https://cve.now/CVE-2011-1413.md): Google Chrome before 10.0.648.127 on Linux does not properly mitigate an unspecified flaw in an X server, which allows remote attackers to c (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-03-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.