# CVEs published 2011-12-13

18 CVEs were published on December 13, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-3903](https://cve.now/CVE-2011-3903.md): Google Chrome before 16.0.912.63 does not properly perform regex matching, which allows remote attackers to cause a denial of service (out-o (no CVSS)
- [CVE-2011-3904](https://cve.now/CVE-2011-3904.md): Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspe (no CVSS)
- [CVE-2011-3905](https://cve.now/CVE-2011-3905.md): libxml2, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecif (no CVSS)
- [CVE-2011-3906](https://cve.now/CVE-2011-3906.md): The PDF parser in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified (no CVSS)
- [CVE-2011-3907](https://cve.now/CVE-2011-3907.md): The view-source feature in Google Chrome before 16.0.912.63 allows remote attackers to spoof the URL bar via unspecified vectors. (no CVSS)
- [CVE-2011-3908](https://cve.now/CVE-2011-3908.md): Google Chrome before 16.0.912.63 does not properly parse SVG documents, which allows remote attackers to cause a denial of service (out-of-b (no CVSS)
- [CVE-2011-3909](https://cve.now/CVE-2011-3909.md): The Cascading Style Sheets (CSS) implementation in Google Chrome before 16.0.912.63 on 64-bit platforms does not properly manage property ar (no CVSS)
- [CVE-2011-3910](https://cve.now/CVE-2011-3910.md): Google Chrome before 16.0.912.63 does not properly handle YUV video frames, which allows remote attackers to cause a denial of service (out- (no CVSS)
- [CVE-2011-3911](https://cve.now/CVE-2011-3911.md): Google Chrome before 16.0.912.63 does not properly handle PDF documents, which allows remote attackers to cause a denial of service (out-of- (no CVSS)
- [CVE-2011-3912](https://cve.now/CVE-2011-3912.md): Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspe (no CVSS)
- [CVE-2011-3913](https://cve.now/CVE-2011-3913.md): Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspe (no CVSS)
- [CVE-2011-3914](https://cve.now/CVE-2011-3914.md): The internationalization (aka i18n) functionality in Google V8, as used in Google Chrome before 16.0.912.63, allows remote attackers to caus (no CVSS)
- [CVE-2011-3915](https://cve.now/CVE-2011-3915.md): Buffer overflow in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other (no CVSS)
- [CVE-2011-3916](https://cve.now/CVE-2011-3916.md): Google Chrome before 16.0.912.63 does not properly handle PDF cross references, which allows remote attackers to cause a denial of service ( (no CVSS)
- [CVE-2011-3917](https://cve.now/CVE-2011-3917.md): Stack-based buffer overflow in FileWatcher in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possi (no CVSS)
- [CVE-2011-4201](https://cve.now/CVE-2011-4201.md): remote\_support.cgi in the Tadasoft Restorepoint 3.2 evaluation image allows remote attackers to execute arbitrary commands via shell metacha (no CVSS)
- [CVE-2011-4202](https://cve.now/CVE-2011-4202.md): The Tadasoft Restorepoint 3.2 evaluation image uses weak permissions (www write access) for unspecified scripts, which allows local users to (no CVSS)
- [CVE-2011-4266](https://cve.now/CVE-2011-4266.md): Untrusted search path vulnerability in FFFTP before 1.98d allows local users to gain privileges via a Trojan horse executable file in a dire (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-12-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.