# CVEs published 2012-05-16 30 CVEs were published on May 16, 2012: 0 critical, 0 high. Days are UTC. - [CVE-2012-0265](https://cve.now/CVE-2012-0265.md): Stack-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial o (no CVSS) - [CVE-2012-0663](https://cve.now/CVE-2012-0663.md): Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbitrary code or cause a (no CVSS) - [CVE-2012-0664](https://cve.now/CVE-2012-0664.md): Heap-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of (no CVSS) - [CVE-2012-0665](https://cve.now/CVE-2012-0665.md): Heap-based buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (a (no CVSS) - [CVE-2012-0666](https://cve.now/CVE-2012-0666.md): Stack-based buffer overflow in the plugin in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or ca (no CVSS) - [CVE-2012-0667](https://cve.now/CVE-2012-0667.md): Integer signedness error in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of s (no CVSS) - [CVE-2012-0668](https://cve.now/CVE-2012-0668.md): Buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application (no CVSS) - [CVE-2012-0669](https://cve.now/CVE-2012-0669.md): Buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (a (no CVSS) - [CVE-2012-0670](https://cve.now/CVE-2012-0670.md): Integer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application (no CVSS) - [CVE-2012-0671](https://cve.now/CVE-2012-0671.md): Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicati (no CVSS) - [CVE-2011-3083](https://cve.now/CVE-2011-3083.md): browser/profiles/profile\_impl\_io\_data.cc in Google Chrome before 19.0.1084.46 does not properly handle a malformed ftp URL in the SRC attrib (no CVSS) - [CVE-2011-3084](https://cve.now/CVE-2011-3084.md): Google Chrome before 19.0.1084.46 does not use a dedicated process for the loading of links found on an internal page, which might allow att (no CVSS) - [CVE-2011-3085](https://cve.now/CVE-2011-3085.md): The Autofill feature in Google Chrome before 19.0.1084.46 does not properly restrict field values, which allows remote attackers to cause a (no CVSS) - [CVE-2011-3086](https://cve.now/CVE-2011-3086.md): Use-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unsp (no CVSS) - [CVE-2011-3087](https://cve.now/CVE-2011-3087.md): Google Chrome before 19.0.1084.46 does not properly perform window navigation, which has unspecified impact and remote attack vectors. (no CVSS) - [CVE-2011-3088](https://cve.now/CVE-2011-3088.md): Google Chrome before 19.0.1084.46 does not properly draw hairlines, which allows remote attackers to cause a denial of service (out-of-bound (no CVSS) - [CVE-2011-3089](https://cve.now/CVE-2011-3089.md): Use-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unsp (no CVSS) - [CVE-2011-3090](https://cve.now/CVE-2011-3090.md): Race condition in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other (no CVSS) - [CVE-2011-3091](https://cve.now/CVE-2011-3091.md): Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial (no CVSS) - [CVE-2011-3092](https://cve.now/CVE-2011-3092.md): The regex implementation in Google V8, as used in Google Chrome before 19.0.1084.46, allows remote attackers to cause a denial of service (i (no CVSS) - [CVE-2011-3093](https://cve.now/CVE-2011-3093.md): Google Chrome before 19.0.1084.46 does not properly handle glyphs, which allows remote attackers to cause a denial of service (out-of-bounds (no CVSS) - [CVE-2011-3094](https://cve.now/CVE-2011-3094.md): Google Chrome before 19.0.1084.46 does not properly handle Tibetan text, which allows remote attackers to cause a denial of service (out-of- (no CVSS) - [CVE-2011-3095](https://cve.now/CVE-2011-3095.md): The OGG container in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified oth (no CVSS) - [CVE-2011-3096](https://cve.now/CVE-2011-3096.md): Use-after-free vulnerability in Google Chrome before 19.0.1084.46 on Linux allows remote attackers to cause a denial of service or possibly (no CVSS) - [CVE-2011-3097](https://cve.now/CVE-2011-3097.md): The PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified (no CVSS) - [CVE-2011-3098](https://cve.now/CVE-2011-3098.md): Google Chrome before 19.0.1084.46 on Windows uses an incorrect search path for the Windows Media Player plug-in, which might allow local use (no CVSS) - [CVE-2011-3099](https://cve.now/CVE-2011-3099.md): Use-after-free vulnerability in the PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of serv (no CVSS) - [CVE-2011-3100](https://cve.now/CVE-2011-3100.md): Google Chrome before 19.0.1084.46 does not properly draw dash paths, which allows remote attackers to cause a denial of service (out-of-boun (no CVSS) - [CVE-2011-3101](https://cve.now/CVE-2011-3101.md): Google Chrome before 19.0.1084.46 on Linux does not properly mitigate an unspecified flaw in an NVIDIA driver, which has unknown impact and (no CVSS) - [CVE-2011-3102](https://cve.now/CVE-2011-3102.md): Off-by-one error in libxml2, as used in Google Chrome before 19.0.1084.46 and other products, allows remote attackers to cause a denial of s (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2012-05-16 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.