{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eVersions ant\u00e9rieures \u00e0 la mise \u00e0 jour 18.0.1025.142.\u003c/P\u003e",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2011-3065",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3065"
    },
    {
      "name": "CVE-2011-3062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3062"
    },
    {
      "name": "CVE-2011-3061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3061"
    },
    {
      "name": "CVE-2011-3064",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3064"
    },
    {
      "name": "CVE-2011-3060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3060"
    },
    {
      "name": "CVE-2011-3063",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3063"
    },
    {
      "name": "CVE-2011-3059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3059"
    },
    {
      "name": "CVE-2011-3058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3058"
    },
    {
      "name": "CVE-2011-3057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3057"
    }
  ],
  "initial_release_date": "2012-04-02T00:00:00",
  "last_revision_date": "2012-04-02T00:00:00",
  "links": [
    {
      "title": "Note de version Google Chrome du 28 mars 2012 :",
      "url": "http://googlechromereleases.blogspot.com/2012/03/stable-channel-release-and-beta-channel.html"
    }
  ],
  "reference": "CERTA-2012-AVI-182",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2012-04-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Neuf vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9s corrig\u00e9es dans \u003cspan class=\"textit\"\u003eGoogle\nChrome\u003c/span\u003e. Les vuln\u00e9rabilit\u00e9s sont r\u00e9parties comme suit :\n\n-   deux affectent le moteur SVG ;\n-   une concerne le proxy \u003cspan class=\"textit\"\u003eSPDY\u003c/span\u003e ;\n-   une concerne \u003cspan class=\"textit\"\u003eOpenType\u003c/span\u003e ;\n-   une est pr\u00e9sente dans \u003cspan class=\"textit\"\u003ev8\u003c/span\u003e ;\n-   une affecte \u003cspan class=\"textit\"\u003eSkia\u003c/span\u003e ;\n-   une r\u00e9sulte d\u0027une erreur dans la fragmentation du texte ;\n-   la derni\u00e8re concerne la s\u00e9curit\u00e9 de navigation.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Chrome",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Google Chrome du 28 mars 2012",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eApple iOS versions ant\u00e9rieures \u00e0 6.1\u003c/P\u003e",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2012-3607",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3607"
    },
    {
      "name": "CVE-2013-0956",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0956"
    },
    {
      "name": "CVE-2013-0949",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0949"
    },
    {
      "name": "CVE-2012-3701",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3701"
    },
    {
      "name": "CVE-2013-0963",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0963"
    },
    {
      "name": "CVE-2013-0974",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0974"
    },
    {
      "name": "CVE-2013-0952",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0952"
    },
    {
      "name": "CVE-2013-0953",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0953"
    },
    {
      "name": "CVE-2013-0954",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0954"
    },
    {
      "name": "CVE-2012-2824",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2824"
    },
    {
      "name": "CVE-2013-0950",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0950"
    },
    {
      "name": "CVE-2012-3606",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3606"
    },
    {
      "name": "CVE-2013-0959",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0959"
    },
    {
      "name": "CVE-2012-2889",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2889"
    },
    {
      "name": "CVE-2013-0962",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0962"
    },
    {
      "name": "CVE-2011-3058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3058"
    },
    {
      "name": "CVE-2013-0964",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0964"
    },
    {
      "name": "CVE-2013-0955",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0955"
    },
    {
      "name": "CVE-2012-2619",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2619"
    },
    {
      "name": "CVE-2013-0968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0968"
    },
    {
      "name": "CVE-2013-0958",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0958"
    },
    {
      "name": "CVE-2012-3632",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3632"
    },
    {
      "name": "CVE-2013-0948",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0948"
    },
    {
      "name": "CVE-2012-2857",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2857"
    },
    {
      "name": "CVE-2012-3621",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3621"
    },
    {
      "name": "CVE-2012-3687",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3687"
    },
    {
      "name": "CVE-2013-0951",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0951"
    }
  ],
  "initial_release_date": "2013-01-30T00:00:00",
  "last_revision_date": "2013-01-30T00:00:00",
  "links": [],
  "reference": "CERTA-2013-AVI-075",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2013-01-30T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eApple iOS\u003c/span\u003e. Certaines d\u0027entre elles permettent \u00e0 un\nattaquant d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance au moyen de pages Web\nsp\u00e9cialement con\u00e7ues.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple iOS",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT5642 du 28 janvier 2013",
      "url": "http://support.apple.com/kb/HT5642"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eVersions ant\u00e9rieures \u00e0 OS X Mountain Lion v10.8.3\u003c/P\u003e",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2013-0976",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0976"
    },
    {
      "name": "CVE-2013-0971",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0971"
    },
    {
      "name": "CVE-2013-0969",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0969"
    },
    {
      "name": "CVE-2013-0156",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0156"
    },
    {
      "name": "CVE-2012-2088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2088"
    },
    {
      "name": "CVE-2012-3756",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3756"
    },
    {
      "name": "CVE-2013-0963",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0963"
    },
    {
      "name": "CVE-2012-3488",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3488"
    },
    {
      "name": "CVE-2012-3749",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3749"
    },
    {
      "name": "CVE-2011-3058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3058"
    },
    {
      "name": "CVE-2013-0970",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0970"
    },
    {
      "name": "CVE-2013-0973",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0973"
    },
    {
      "name": "CVE-2012-3489",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3489"
    },
    {
      "name": "CVE-2012-3525",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3525"
    },
    {
      "name": "CVE-2013-0967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0967"
    },
    {
      "name": "CVE-2013-0333",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0333"
    },
    {
      "name": "CVE-2013-0966",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0966"
    }
  ],
  "initial_release_date": "2013-03-18T00:00:00",
  "last_revision_date": "2013-03-18T00:00:00",
  "links": [],
  "reference": "CERTA-2013-AVI-187",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2013-03-18T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eApple OS X Mountain Lion\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un contournement de la politique de s\u00e9curit\u00e9 et une atteinte\n\u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple OS X Mountain Lion",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT5672 du 14 mars 2013",
      "url": "http://support.apple.com/kb/HT5672"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eGoogle Chrome versions ant\u00e9rieures \u00e0 26.0.1410.43\u003c/P\u003e",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2013-0976",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0976"
    },
    {
      "name": "CVE-2013-0971",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0971"
    },
    {
      "name": "CVE-2013-0969",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0969"
    },
    {
      "name": "CVE-2013-0156",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0156"
    },
    {
      "name": "CVE-2012-2088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2088"
    },
    {
      "name": "CVE-2012-3756",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3756"
    },
    {
      "name": "CVE-2013-0963",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0963"
    },
    {
      "name": "CVE-2012-3488",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3488"
    },
    {
      "name": "CVE-2012-3749",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3749"
    },
    {
      "name": "CVE-2011-3058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3058"
    },
    {
      "name": "CVE-2013-0970",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0970"
    },
    {
      "name": "CVE-2013-0973",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0973"
    },
    {
      "name": "CVE-2012-3489",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3489"
    },
    {
      "name": "CVE-2012-3525",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3525"
    },
    {
      "name": "CVE-2013-0967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0967"
    },
    {
      "name": "CVE-2013-0333",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0333"
    },
    {
      "name": "CVE-2013-0966",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0966"
    }
  ],
  "initial_release_date": "2013-03-27T00:00:00",
  "last_revision_date": "2013-03-27T00:00:00",
  "links": [],
  "reference": "CERTA-2013-AVI-204",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2013-03-27T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eGoogle Chrome\u003c/span\u003e. Certaines d\u0027entre elles permettent\n\u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance,\nun d\u00e9ni de service \u00e0 distance et un contournement de la politique de\ns\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Chrome",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Google du 26 mars 2013",
      "url": "http://googlechromereleases.blogspot.fr/2013/03/stable-channel-update_26.html"
    }
  ]
}

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B25C0401-A5AB-4396-A994-1405B13C0FEB",
              "versionEndExcluding": "18.0.1025.142",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "445C62EF-13BC-4C82-BE2B-3E8B33F7A38C",
              "versionEndExcluding": "6.0.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9F58D896-2E21-4EBC-B074-05BC8A9A558E",
              "versionEndExcluding": "10.8.3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Google Chrome before 18.0.1025.142 does not properly handle the EUC-JP encoding system, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Las versiones de Google Chrome anteriores a  v18.0.1025.142 no manejan correctamente el sistema de codificaci\u00f3n EUC-JP, lo que podr\u00eda permitir a atacantes remotos producir ataques de ejecuci\u00f3n de comandos en sitios cruzados(XSS) a trav\u00e9s de vectores no especificados."
    }
  ],
  "id": "CVE-2011-3058",
  "lastModified": "2026-06-16T23:32:32.300",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2012-03-30T22:55:01.353",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "url": "http://code.google.com/p/chromium/issues/detail?id=109574"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "http://googlechromereleases.blogspot.com/2012/03/stable-channel-release-and-beta-channel.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/48618"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/48691"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://secunia.com/advisories/48763"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://support.apple.com/kb/HT5642"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/52762"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id?1026877"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74408"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15492"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "url": "http://code.google.com/p/chromium/issues/detail?id=109574"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "http://googlechromereleases.blogspot.com/2012/03/stable-channel-release-and-beta-channel.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/48618"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/48691"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://secunia.com/advisories/48763"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://support.apple.com/kb/HT5642"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/52762"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id?1026877"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74408"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15492"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2011-3058"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-79"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2012-03-30T22:55:00Z",
    "severity": "MODERATE"
  },
  "details": "Google Chrome before 18.0.1025.142 does not properly handle the EUC-JP encoding system, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.",
  "id": "GHSA-rhc9-v6vp-9wxm",
  "modified": "2022-05-13T01:27:20Z",
  "published": "2022-05-13T01:27:20Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3058"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74408"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15492"
    },
    {
      "type": "WEB",
      "url": "http://code.google.com/p/chromium/issues/detail?id=109574"
    },
    {
      "type": "WEB",
      "url": "http://googlechromereleases.blogspot.com/2012/03/stable-channel-release-and-beta-channel.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/48618"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/48691"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/48763"
    },
    {
      "type": "WEB",
      "url": "http://support.apple.com/kb/HT5642"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/52762"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id?1026877"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "GSD": {
    "alias": "CVE-2011-3058",
    "description": "Google Chrome before 18.0.1025.142 does not properly handle the EUC-JP encoding system, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.",
    "id": "GSD-2011-3058",
    "references": [
      "https://www.suse.com/security/cve/CVE-2011-3058.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2011-3058"
      ],
      "details": "Google Chrome before 18.0.1025.142 does not properly handle the EUC-JP encoding system, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.",
      "id": "GSD-2011-3058",
      "modified": "2023-12-13T01:19:10.183182Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2011-3058",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Google Chrome before 18.0.1025.142 does not properly handle the EUC-JP encoding system, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "1026877",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id?1026877"
          },
          {
            "name": "48618",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/48618"
          },
          {
            "name": "http://support.apple.com/kb/HT5642",
            "refsource": "CONFIRM",
            "url": "http://support.apple.com/kb/HT5642"
          },
          {
            "name": "48691",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/48691"
          },
          {
            "name": "APPLE-SA-2013-03-14-1",
            "refsource": "APPLE",
            "url": "http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html"
          },
          {
            "name": "http://googlechromereleases.blogspot.com/2012/03/stable-channel-release-and-beta-channel.html",
            "refsource": "CONFIRM",
            "url": "http://googlechromereleases.blogspot.com/2012/03/stable-channel-release-and-beta-channel.html"
          },
          {
            "name": "oval:org.mitre.oval:def:15492",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15492"
          },
          {
            "name": "52762",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/52762"
          },
          {
            "name": "APPLE-SA-2013-01-28-1",
            "refsource": "APPLE",
            "url": "http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html"
          },
          {
            "name": "google-chrome-interaction-xss(74408)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74408"
          },
          {
            "name": "http://code.google.com/p/chromium/issues/detail?id=109574",
            "refsource": "CONFIRM",
            "url": "http://code.google.com/p/chromium/issues/detail?id=109574"
          },
          {
            "name": "48763",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/48763"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "18.0.1025.142",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "6.0.1",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "10.8.3",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2011-3058"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Google Chrome before 18.0.1025.142 does not properly handle the EUC-JP encoding system, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-79"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://googlechromereleases.blogspot.com/2012/03/stable-channel-release-and-beta-channel.html",
              "refsource": "CONFIRM",
              "tags": [
                "Release Notes",
                "Vendor Advisory"
              ],
              "url": "http://googlechromereleases.blogspot.com/2012/03/stable-channel-release-and-beta-channel.html"
            },
            {
              "name": "http://code.google.com/p/chromium/issues/detail?id=109574",
              "refsource": "CONFIRM",
              "tags": [
                "Exploit",
                "Vendor Advisory"
              ],
              "url": "http://code.google.com/p/chromium/issues/detail?id=109574"
            },
            {
              "name": "48618",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/48618"
            },
            {
              "name": "1026877",
              "refsource": "SECTRACK",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securitytracker.com/id?1026877"
            },
            {
              "name": "52762",
              "refsource": "BID",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securityfocus.com/bid/52762"
            },
            {
              "name": "48691",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/48691"
            },
            {
              "name": "APPLE-SA-2013-01-28-1",
              "refsource": "APPLE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html"
            },
            {
              "name": "http://support.apple.com/kb/HT5642",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://support.apple.com/kb/HT5642"
            },
            {
              "name": "48763",
              "refsource": "SECUNIA",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://secunia.com/advisories/48763"
            },
            {
              "name": "APPLE-SA-2013-03-14-1",
              "refsource": "APPLE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html"
            },
            {
              "name": "google-chrome-interaction-xss(74408)",
              "refsource": "XF",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74408"
            },
            {
              "name": "oval:org.mitre.oval:def:15492",
              "refsource": "OVAL",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15492"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": true
        }
      },
      "lastModifiedDate": "2020-04-14T15:17Z",
      "publishedDate": "2012-03-30T22:55Z"
    }
  }
}

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201203-0179",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "chrome",
        "scope": "lt",
        "trust": 1.8,
        "vendor": "google",
        "version": "18.0.1025.142"
      },
      {
        "model": "mac os x",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "apple",
        "version": "10.8.3"
      },
      {
        "model": "iphone os",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "apple",
        "version": "6.0.1"
      },
      {
        "model": "mac os x",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "apple",
        "version": "10.6.8"
      },
      {
        "model": "mac os x",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "apple",
        "version": "server 10.6.8"
      },
      {
        "model": "mac os x",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "apple",
        "version": "server v10.7 to  v10.7.5"
      },
      {
        "model": "mac os x",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "apple",
        "version": "v10.7 to  v10.7.5"
      },
      {
        "model": "mac os x",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "apple",
        "version": "v10.8 to  v10.8.2"
      },
      {
        "model": "ios",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "apple",
        "version": "6.1   (ipad 2 or later )"
      },
      {
        "model": "ios",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "apple",
        "version": "6.1   (iphone 3gs or later )"
      },
      {
        "model": "ios",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "apple",
        "version": "6.1   (ipod touch first  4 after generation )"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "google",
        "version": "18.0.1025.9"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "google",
        "version": "18.0.1025.31"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "google",
        "version": "18.0.1025.5"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "google",
        "version": "18.0.1025.29"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "google",
        "version": "18.0.1025.7"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "google",
        "version": "18.0.1025.10"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "google",
        "version": "18.0.1025.6"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "google",
        "version": "18.0.1025.30"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "google",
        "version": "18.0.1025.4"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "google",
        "version": "18.0.1025.8"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "17.0.963.83"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "11.0.696.57"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "12.0.742.100"
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.7.1"
      },
      {
        "model": "itunes",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "10.6"
      },
      {
        "model": "safari",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.0.1"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "4"
      },
      {
        "model": "safari for windows",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.0.1"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "4.3"
      },
      {
        "model": "safari",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.0.5"
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.7"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "14.0.835.202"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "11.0.696.43"
      },
      {
        "model": "safari for windows",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.0.5"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "4.2"
      },
      {
        "model": "safari for windows",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.1.4"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "16.0.912.75"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "17.0.963.60"
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.6.8"
      },
      {
        "model": "chrome",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "google",
        "version": "18.0.1025.142"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "13"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "10.0.648.204"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "10.0.648.128"
      },
      {
        "model": "safari for windows",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.1.5"
      },
      {
        "model": "itunes",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "10.2.2"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "4.1"
      },
      {
        "model": "safari for windows",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.0.4"
      },
      {
        "model": "safari",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.0.6"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "2.1"
      },
      {
        "model": "safari for windows",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.0.6"
      },
      {
        "model": "safari",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.0"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "3.0"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "10.0.648.127"
      },
      {
        "model": "safari for windows",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.0"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "11.0.696.65"
      },
      {
        "model": "safari",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.1.7"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "3.1"
      },
      {
        "model": "mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.7.4"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "4.3.5"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "16.0.91275"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "17.0.96379"
      },
      {
        "model": "safari",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.0.2"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "12.0.742.112"
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.7.4"
      },
      {
        "model": "safari for windows",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.0.2"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "11.0.696.71"
      },
      {
        "model": "safari",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.1"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "12.0.742.91"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "17.0.963.78"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "2.0"
      },
      {
        "model": "linux",
        "scope": null,
        "trust": 0.3,
        "vendor": "gentoo",
        "version": null
      },
      {
        "model": "itunes",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "10.5"
      },
      {
        "model": "linux lts i386",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ubuntu",
        "version": "12.04"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "17.0.963.56"
      },
      {
        "model": "mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.7.2"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "13.0.782.107"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "15.0.874.120"
      },
      {
        "model": "itunes",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "10.2"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "14"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "11.0.696.77"
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.7.2"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.1"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "16"
      },
      {
        "model": "safari for windows",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.1.7"
      },
      {
        "model": "linux lts amd64",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ubuntu",
        "version": "12.04"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "17.0.96365"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "11.0.696.68"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "11.0.672.2"
      },
      {
        "model": "safari",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.1.1"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "15.0.874.121"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "12"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "14.0.835.163"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "10"
      },
      {
        "model": "safari for windows",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.1.1"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "16.0.912.77"
      },
      {
        "model": "safari for windows",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.1"
      },
      {
        "model": "safari",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.0.3"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "11"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "13.0.782.112"
      },
      {
        "model": "safari",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.1.4"
      },
      {
        "model": "safari for windows",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.0.3"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "15.0.874102"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "10.0.648.133"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.1.1"
      },
      {
        "model": "mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.7.3"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.0.1"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "13.0.782.215"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "10.0.648.205"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "14.0.835.186"
      },
      {
        "model": "mac os server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.7.3"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "17.0.963.46"
      },
      {
        "model": "chrome",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "google",
        "version": "16.0.912.63"
      },
      {
        "model": "ios",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "3.2"
      },
      {
        "model": "safari",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "5.0.4"
      },
      {
        "model": "mac os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "apple",
        "version": "x10.7.1"
      }
    ],
    "sources": [
      {
        "db": "BID",
        "id": "52762"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001968"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201203-576"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-3058"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/a:google:chrome",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:apple:mac_os_x",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:apple:iphone_os",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001968"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Masato Kinugawa, Arthur Gerkis, miaubiz, Leonidas Kontothanassis of Google, Mateusz Jurczyk of the Google Security Team, kuzzcc, Sergey Glazunov, PinkiePie, scarybeasts (Google Chrome Security Team), Atte Kettunen of OUSPG, Omair, and Christian Holler.",
    "sources": [
      {
        "db": "BID",
        "id": "52762"
      }
    ],
    "trust": 0.3
  },
  "cve": "CVE-2011-3058",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 8.6,
            "id": "CVE-2011-3058",
            "impactScore": 2.9,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 1.8,
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 8.6,
            "id": "VHN-51003",
            "impactScore": 2.9,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.1,
            "vectorString": "AV:N/AC:M/AU:N/C:N/I:P/A:N",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2011-3058",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "NVD",
            "id": "CVE-2011-3058",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201203-576",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "VULHUB",
            "id": "VHN-51003",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-51003"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001968"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201203-576"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-3058"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Google Chrome before 18.0.1025.142 does not properly handle the EUC-JP encoding system, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors. Google Chrome is prone to multiple vulnerabilities. \nAttackers can exploit these issues to execute arbitrary code in the     context of the browser, bypass security restrictions, and perform cross-site scripting attacks; other  attacks may also be possible. \nVersions prior to Chrome 18.0.1025.142  are vulnerable. Google Chrome is a web browser developed by Google (Google). \nCVE-ID\nCVE-2011-3058 : Masato Kinugawa\n\nKernel\nAvailable for:  iPhone 3GS and later,\niPod touch (4th generation) and later, iPad 2 and later\nImpact:  A user-mode process may be able to access the first page of\nkernel memory\nDescription:  The iOS kernel has checks to validate that the user-\nmode pointer and length passed to the copyin and copyout functions\nwould not result in a user-mode process being able to directly access\nkernel memory. The checks were not being used if the length was\nsmaller than one page. \n\nStoreKit\nAvailable for:  iPhone 3GS and later,\niPod touch (4th generation) and later, iPad 2 and later\nImpact:  JavaScript may be enabled in Mobile Safari without user\ninteraction\nDescription:  If a user disabled JavaScript in Safari Preferences,\nvisiting a site which displayed a Smart App Banner would re-enable\nJavaScript without warning the user. This issue was addressed by not\nenabling JavaScript when visiting a site with a Smart App Banner. \nCVE-ID\nCVE-2012-2824 : miaubiz\nCVE-2012-2857 : Arthur Gerkis\nCVE-2012-3606 : Abhishek Arya (Inferno) of the Google Chrome Security\nTeam\nCVE-2012-3607 : Abhishek Arya (Inferno) of the Google Chrome Security\nTeam\nCVE-2012-3621 : Skylined of the Google Chrome Security Team\nCVE-2012-3632 : Abhishek Arya (Inferno) of the Google Chrome Security\nTeam\nCVE-2012-3687 : kuzzcc\nCVE-2012-3701 : Abhishek Arya (Inferno) of the Google Chrome Security\nTeam\nCVE-2013-0948 : Abhishek Arya (Inferno) of the Google Chrome Security\nTeam\nCVE-2013-0949 : Abhishek Arya (Inferno) of the Google Chrome Security\nTeam\nCVE-2013-0950 : Abhishek Arya (Inferno) of the Google Chrome Security\nTeam\nCVE-2013-0951 : Apple\nCVE-2013-0952 : Abhishek Arya (Inferno) of the Google Chrome Security\nTeam\nCVE-2013-0953 : Abhishek Arya (Inferno) of the Google Chrome Security\nTeam\nCVE-2013-0954 : Dominic Cooney of Google and Martin Barbella of the\nGoogle Chrome Security Team\nCVE-2013-0955 : Apple\nCVE-2013-0956 : Apple Product Security\nCVE-2013-0958 : Abhishek Arya (Inferno) of the Google Chrome Security\nTeam\nCVE-2013-0959 : Abhishek Arya (Inferno) of the Google Chrome Security\nTeam\nCVE-2013-0968 : Aaron Nelson\n\nWebKit\nAvailable for:  iPhone 3GS and later,\niPod touch (4th generation) and later, iPad 2 and later\nImpact:  Copying and pasting content on a malicious website may lead\nto a cross-site scripting attack\nDescription:  A cross-site scripting issue existed in the handling of\ncontent pasted from a different origin. Make sure you have an\nInternet connection and have installed the latest version of iTunes\nfrom www.apple.com/itunes/\n\niTunes and Software Update on the device will automatically check\nApple\u0027s update server on its weekly schedule. When an update is\ndetected, it is downloaded and the option to be installed is\npresented to the user when the iOS device is docked. We recommend\napplying the update immediately if possible. Selecting Don\u0027t Install\nwill present the option the next time you connect your iOS device. \n\nThe automatic update process may take up to a week depending on the\nday that iTunes or the device checks for updates. You may manually\nobtain the update via the Check for Updates button within iTunes, or\nthe Software Update on your device. \n\nTo check that the iPhone, iPod touch, or iPad has been updated:\n\n* Navigate to Settings\n* Select General\n* Select About. The version after applying this update\nwill be \"6.1\". - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nGentoo Linux Security Advisory                           GLSA 201203-24\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n                                            http://security.gentoo.org/\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\n Severity: Normal\n    Title: Chromium, V8: Multiple vulnerabilities\n     Date: March 30, 2012\n     Bugs: #410045\n       ID: 201203-24\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\nSynopsis\n========\n\nMultiple vulnerabilities have been reported in Chromium and V8, some of\nwhich may allow execution of arbitrary code. \n\nBackground\n==========\n\nChromium is an open source web browser project. V8 is Google\u0027s open\nsource JavaScript engine. SPDY is an experimental networking protocol. \n\nAffected packages\n=================\n\n    -------------------------------------------------------------------\n     Package              /     Vulnerable     /            Unaffected\n    -------------------------------------------------------------------\n  1  www-client/chromium      \u003c 18.0.1025.142        \u003e= 18.0.1025.142\n  2  dev-lang/v8                 \u003c 3.8.9.16               \u003e= 3.8.9.16\n    -------------------------------------------------------------------\n     2 affected packages\n\nDescription\n===========\n\nMultiple vulnerabilities have been discovered in Chromium and V8. \nPlease review the CVE identifiers and release notes referenced below\nfor details. \n\nImpact\n======\n\nA context-dependent attacker could entice a user to open a specially\ncrafted web site or JavaScript program using Chromium or V8, possibly\nresulting in the execution of arbitrary code with the privileges of the\nprocess, or a Denial of Service condition. \n\nThe attacker could also entice a user to open a specially crafted web\nsite using Chromium, possibly resulting in cross-site scripting (XSS),\nor an unspecified SPDY certificate checking error. \n\nWorkaround\n==========\n\nThere is no known workaround at this time. \n\nResolution\n==========\n\nAll Chromium users should upgrade to the latest version:\n\n  # emerge --sync\n  # emerge --ask --oneshot -v \"\u003e=www-client/chromium-18.0.1025.142\"\n\nAll V8 users should upgrade to the latest version:\n\n  # emerge --sync\n  # emerge --ask --oneshot --verbose \"\u003e=dev-lang/v8-3.8.9.16\"\n\nReferences\n==========\n\n[  1 ] CVE-2011-3057\n       http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3057\n[  2 ] CVE-2011-3058\n       http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3058\n[  3 ] CVE-2011-3059\n       http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3059\n[  4 ] CVE-2011-3060\n       http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3060\n[  5 ] CVE-2011-3061\n       http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3061\n[  6 ] CVE-2011-3062\n       http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3062\n[  7 ] CVE-2011-3063\n       http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3063\n[  8 ] CVE-2011-3064\n       http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3064\n[  9 ] CVE-2011-3065\n       http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3065\n[ 10 ] Release Notes 18.0.1025.142\n\nhttp://googlechromereleases.blogspot.com/2012/03/stable-channel-release-a=\nnd-beta-channel.html\n\nAvailability\n============\n\nThis GLSA and any updates to it are available for viewing at\nthe Gentoo Security Website:\n\n http://security.gentoo.org/glsa/glsa-201203-24.xml\n\nConcerns?\n=========\n\nSecurity is a primary focus of Gentoo Linux and ensuring the\nconfidentiality and security of our users\u0027 machines is of utmost\nimportance to us. Any security concerns should be addressed to\nsecurity@gentoo.org or alternatively, you may file a bug at\nhttps://bugs.gentoo.org. \n\nLicense\n=======\n\nCopyright 2012 Gentoo Foundation, Inc; referenced text\nbelongs to its owner(s). \n\nThe contents of this document are licensed under the\nCreative Commons - Attribution / Share Alike license. \n\nhttp://creativecommons.org/licenses/by-sa/2.5\n. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\nAPPLE-SA-2013-03-14-1 OS X Mountain Lion v10.8.3 and Security Update\n2013-001\n\nOS X Mountain Lion v10.8.3 and Security Update 2013-001 is now\navailable and addresses the following:\n\nApache\nAvailable for:  Mac OS X 10.6.8, Mac OS X Server 10.6.8,\nOS X Lion v10.7 to v10.7.5, OS X Lion Server v10.7 to v10.7.5,\nOS X Mountain Lion v10.8 to v10.8.2\nImpact:  An attacker may be able to access directories that are\nprotected with HTTP authentication without knowing the correct\ncredentials\nDescription:  A canonicalization issue existed in the handling of\nURIs with ignorable Unicode character sequences. This issue was\naddressed by updating mod_hfs_apple to forbid access to URIs with\nignorable Unicode character sequences. \nCVE-ID\nCVE-2013-0966 : Clint Ruoho of Laconic Security\n\nCoreTypes\nAvailable for:  OS X Lion v10.7 to v10.7.5,\nOS X Lion Server v10.7 to v10.7.5,\nOS X Mountain Lion v10.8 to v10.8.2\nImpact:  Visiting a maliciously crafted website could allow a Java\nWeb Start application to be launched automatically even if the Java\nplug-in is disabled\nDescription:  Java Web Start applications would run even if the Java\nplug-in was disabled. This issue was addressed by removing JNLP files\nfrom the CoreTypes safe file type list, so the Web Start application\nwill not be run unless the user opens it in the Downloads directory. \nCVE-ID\nCVE-2013-0967\n\nInternational Components for Unicode\nAvailable for:  Mac OS X 10.6.8, Mac OS X Server 10.6.8,\nOS X Lion v10.7 to v10.7.5, OS X Lion Server v10.7 to v10.7.5,\nOS X Mountain Lion v10.8 to v10.8.2\nImpact:  Visiting a maliciously crafted website may lead to a cross-\nsite scripting attack\nDescription:  A canonicalization issue existed in the handling of the\nEUC-JP encoding, which could lead to a cross-site scripting attack on\nEUC-JP encoded websites. This issue was addressed by updating the\nEUC-JP mapping table. \nCVE-ID\nCVE-2011-3058 : Masato Kinugawa\n\nIdentity Services\nAvailable for:  OS X Lion v10.7 to v10.7.5,\nOS X Lion Server v10.7 to v10.7.5,\nOS X Mountain Lion v10.8 to v10.8.2\nImpact:  Authentication relying on certificate-based Apple ID\nauthentication may be bypassed\nDescription:  An error handling issue existed in Identity Services. \nIf the user\u0027s AppleID certificate failed to validate, the user\u0027s\nAppleID was assumed to be the empty string. If multiple systems\nbelonging to different users enter this state, applications relying\non this identity determination may erroneously extend trust. This\nissue was addressed by ensuring that NULL is returned instead of an\nempty string. \nCVE-ID\nCVE-2013-0963\n\nImageIO\nAvailable for:  Mac OS X 10.6.8, Mac OS X Server 10.6.8,\nOS X Lion v10.7 to v10.7.5, OS X Lion Server v10.7 to v10.7.5,\nOS X Mountain Lion v10.8 to v10.8.2\nImpact:  Viewing a maliciously crafted TIFF file may lead to an\nunexpected application termination or arbitrary code execution\nDescription:  A buffer overflow existed in libtiff\u0027s handling of TIFF\nimages. This issue was addressed through additional validation of\nTIFF images. \nCVE-ID\nCVE-2012-2088\n\nIOAcceleratorFamily\nAvailable for:  OS X Mountain Lion v10.8 to v10.8.2\nImpact:  Viewing a maliciously crafted image may lead to an\nunexpected system termination or arbitrary code execution\nDescription:  A memory corruption issue existed in the handling of\ngraphics data. This issue was addressed through improved bounds\nchecking. \nCVE-ID\nCVE-2013-0976 : an anonymous researcher\n\nKernel\nAvailable for:  OS X Mountain Lion v10.8 to v10.8.2\nImpact:  Maliciously crafted or compromised applications may be able\nto determine addresses in the kernel\nDescription:  An information disclosure issue existed in the handling\nof APIs related to kernel extensions. Responses containing an\nOSBundleMachOHeaders key may have included kernel addresses, which\nmay aid in bypassing address space layout randomization protection. \nThis issue was addressed by unsliding the addresses before returning\nthem. \nCVE-ID\nCVE-2012-3749 : Mark Dowd of Azimuth Security, Eric Monti of Square,\nand additional anonymous researchers\n\nLogin Window\nAvailable for:  OS X Mountain Lion v10.8 to v10.8.2\nImpact:  An attacker with keyboard access may modify the system\nconfiguration\nDescription:  A logic error existed in VoiceOver\u0027s handling of the\nLogin Window, whereby an attacker with access to the keyboard could\nlaunch System Preferences and modify the system configuration. This\nissue was addressed by preventing VoiceOver from launching\napplications at the Login Window. \nCVE-ID\nCVE-2013-0969 : Eric A. Schulman of Purpletree Labs\n\nMessages\nAvailable for:  OS X Mountain Lion v10.8 to v10.8.2\nImpact:  Clicking a link from Messages may initiate a FaceTime call\nwithout prompting\nDescription:  Clicking on a specifically-formatted FaceTime:// URL in\nMessages could bypass the standard confirmation prompt. This issue\nwas addressed by additional validation of FaceTime:// URLs. \nCVE-ID\nCVE-2013-0970 : Aaron Sigel of vtty.com\n\nMessages Server\nAvailable for:  Mac OS X Server 10.6.8,\nOS X Lion Server v10.7 to v10.7.5\nImpact:  A remote attacker may reroute federated Jabber messages\nDescription:  An issue existed in the Jabber server\u0027s handling of\ndialback result messages. An attacker may cause the Jabber server to\ndisclose information intended for users of federated servers. This\nissue was addressed through improved handling of dialback result\nmessages. \nCVE-ID\nCVE-2012-3525\n\nPDFKit\nAvailable for:  Mac OS X 10.6.8, Mac OS X Server 10.6.8,\nOS X Lion v10.7 to v10.7.5, OS X Lion Server v10.7 to v10.7.5,\nOS X Mountain Lion v10.8 to v10.8.2\nImpact:  Viewing a maliciously crafted PDF file may lead to an\nunexpected application termination or arbitrary code execution\nDescription:  A use after free issue existed in the handling of ink\nannotations in PDF files. This issue was addressed through improved\nmemory management. \nCVE-ID\nCVE-2013-0971 : Tobias Klein working with HP TippingPoint\u0027s Zero Day\nInitiative\n\nPodcast Producer Server\nAvailable for:  Mac OS X Server 10.6.8,\nOS X Lion Server v10.7 to v10.7.5\nImpact:  A remote attacker may be able to cause arbitrary code\nexecution\nDescription:  A type casting issue existed in Ruby on Rails\u0027 handling\nof XML parameters. This issue was addressed by disabling XML\nparameters in the Rails implementation used by Podcast Producer\nServer. \nCVE-ID\nCVE-2013-0156\n\nPodcast Producer Server\nAvailable for:  OS X Lion Server v10.7 to v10.7.5\nImpact:  A remote attacker may be able to cause arbitrary code\nexecution\nDescription:  A type casting issue existed in Ruby on Rails\u0027 handling\nof JSON data. This issue was addressed by switching to using the\nJSONGem backend for JSON parsing in the Rails implementation used by\nPodcast Producer Server. \nCVE-ID\nCVE-2013-0333\n\nPostgreSQL\nAvailable for:  Mac OS X Server 10.6.8,\nOS X Lion Server v10.7 to v10.7.5\nImpact:  Multiple vulnerabilities in PostgreSQL\nDescription:  PostgreSQL was updated to version 9.1.5 to address\nmultiple vulnerabilities, the most serious of which may allow\ndatabase users to read files from the file system with the privileges\nof the database server role account. Further information is available\nvia the PostgreSQL web site at\nhttp://www.postgresql.org/docs/9.1/static/release-9-1-5.html\nCVE-ID\nCVE-2012-3488\nCVE-2012-3489\n\nProfile Manager\nAvailable for:  OS X Lion Server v10.7 to v10.7.5\nImpact:  A remote attacker may be able to cause arbitrary code\nexecution\nDescription:  A type casting issue existed in Ruby on Rails\u0027 handling\nof XML parameters. This issue was addressed by disabling XML\nparameters in the Rails implementation used by Profile Manager. \nCVE-ID\nCVE-2013-0156\n\nQuickTime\nAvailable for:  Mac OS X 10.6.8, Mac OS X Server 10.6.8,\nOS X Lion v10.7 to v10.7.5, OS X Lion Server v10.7 to v10.7.5,\nOS X Mountain Lion v10.8 to v10.8.2\nImpact:  Viewing a maliciously crafted movie file may lead to an\nunexpected application termination or arbitrary code execution\nDescription:  A buffer overflow existed in the handling of \u0027rnet\u0027\nboxes in MP4 files. This issue was addressed through improved bounds\nchecking. \nCVE-ID\nCVE-2012-3756 : Kevin Szkudlapski of QuarksLab\n\nRuby\nAvailable for:  Mac OS X Server 10.6.8\nImpact:  A remote attacker may be able to cause arbitrary code\nexecution if a Rails application is running\nDescription:  A type casting issue existed in Ruby on Rails\u0027 handling\nof XML parameters. This issue was addressed by disabling YAML and\nsymbols in XML parameters in Rails. \nCVE-ID\nCVE-2013-0156\n\nSecurity\nAvailable for:  Mac OS X 10.6.8, Mac OS X Server 10.6.8,\nOS X Lion v10.7 to v10.7.5, OS X Lion Server v10.7 to v10.7.5,\nOS X Mountain Lion v10.8 to v10.8.2\nImpact:  An attacker with a privileged network position may intercept\nuser credentials or other sensitive information\nDescription:  Several intermediate CA certificates were mistakenly\nissued by TURKTRUST. This may allow a man-in-the-middle attacker to\nredirect connections and intercept user credentials or other\nsensitive information. This issue was addressed by not allowing the\nincorrect SSL certificates. \n\nSoftware Update\nAvailable for:  Mac OS X 10.6.8, Mac OS X Server 10.6.8,\nOS X Lion v10.7 to v10.7.5, OS X Lion Server v10.7 to v10.7.5\nImpact:  An attacker with a privileged network position may be able\nto cause arbitrary code execution\nDescription:  Software Update allowed a man in the middle attacker to\ninsert plugin content into the marketing text displayed for updates. \nThis may allow the exploitation of a vulnerable plugin, or facilitate\nsocial engineering attacks involving plugins. This issue does not\naffect OS X Mountain Lion systems. This issue was addressed by\npreventing plugins from being loaded in Software Update\u0027s marketing\ntext WebView. \nCVE-ID\nCVE-2013-0973 : Emilio Escobar\n\nWiki Server\nAvailable for:  OS X Lion Server v10.7 to v10.7.5\nImpact:  A remote attacker may be able to cause arbitrary code\nexecution\nDescription:  A type casting issue existed in Ruby on Rails\u0027 handling\nof XML parameters. This issue was addressed by disabling XML\nparameters in the Rails implementation used by Wiki Server. \nCVE-ID\nCVE-2013-0156\n\nWiki Server\nAvailable for:  OS X Lion Server v10.7 to v10.7.5\nImpact:  A remote attacker may be able to cause arbitrary code\nexecution\nDescription:  A type casting issue existed in Ruby on Rails\u0027 handling\nof JSON data. This issue was addressed by switching to using the\nJSONGem backend for JSON parsing in the Rails implementation used by\nWiki Server. \nCVE-ID\nCVE-2013-0333\n\nMalware removal\nAvailable for:  Mac OS X 10.6.8, Mac OS X Server 10.6.8,\nOS X Lion v10.7 to v10.7.5, OS X Lion Server v10.7 to v10.7.5,\nOS X Mountain Lion v10.8 to v10.8.2\nDescription:  This update runs a malware removal tool that will\nremove the most common variants of malware. If malware is found, it\npresents a dialog notifying the user that malware was removed. There\nis no indication to the user if malware is not found. \n\n\nNote: OS X Mountain Lion v10.8.3 includes the content of\nSafari 6.0.3. For further details see \"About the security content\nof Safari 6.0.3\" at http://http//support.apple.com/kb/HT5671\n\nOS X Mountain Lion v10.8.3 and Security Update 2013-001 may be\nobtained from the Software Update pane in System Preferences,\nor Apple\u0027s Software Downloads web site:\nhttp://www.apple.com/support/downloads/\n\nThe Software Update utility will present the update that applies\nto your system configuration. Only one is needed, either\nOS X Mountain Lion v10.8.3, or Security Update\n2013-001. \n\nFor OS X Mountain Lion v10.8.2\nThe download file is named: OSXUpd10.8.3.dmg\nIts SHA-1 digest is: e6165572e9145ea05aac23fa30372a9b0a0bbf3c\n\nFor OS X Mountain Lion v10.8 and v10.8.1\nThe download file is named: OSXUpdCombo10.8.3.dmg\nIts SHA-1 digest is: 1bc49fde5ff6e252aa7908b4cb1f9cb9c8a5fa29\n\nFor OS X Lion v10.7.5\nThe download file is named: SecUpd2013-001.dmg\nIts SHA-1 digest is: 5bc540a208c720fce3448f853d852336781e1a17\n\nFor OS X Lion Server v10.7.5\nThe download file is named: SecUpdSrvr2013-001.dmg\nIts SHA-1 digest is: e88ff36fc8e88c4c995422d3f2364c56ebe51b07\n\nFor Mac OS X v10.6.8\nThe download file is named: SecUpd2013-001.dmg\nIts SHA-1 digest is: dc52d0f7d2db6080c57c7b9252a4d85c5e178450\n\nFor Mac OS X Server v10.6.8\nThe download file is named: SecUpdSrvr2013-001.dmg\nIts SHA-1 digest is: fd7946f8d1f1bce0394b6e56c8d7387812e14694\n\nInformation will also be posted to the Apple Security Updates\nweb site: http://support.apple.com/kb/HT1222\n\nThis message is signed with Apple\u0027s Product Security PGP key,\nand details are available at:\nhttps://www.apple.com/support/security/pgp/\n\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG/MacGPG2 v2.0.17 (Darwin)\nComment: GPGTools - http://gpgtools.org\n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\nLz1nnBtRAbfDgARdRX4e\n=WUBR\n-----END PGP SIGNATURE-----\n. This fixes multiple\nvulnerabilities, where some have an unknown impact and others can be\nexploited by malicious people to conduct cross-site scripting and\nspoofing attacks and compromise a user\u0027s system. ----------------------------------------------------------------------\n\nBecome a PSI 3.0 beta tester!\nTest-drive the new beta version and tell us what you think about its extended automatic update function and significantly enhanced user-interface. \nDownload it here!\nhttp://secunia.com/psi_30_beta_launch\n\n----------------------------------------------------------------------\n\nTITLE:\nGoogle Chrome Multiple Vulnerabilities\n\nSECUNIA ADVISORY ID:\nSA48618\n\nVERIFY ADVISORY:\nSecunia.com\nhttp://secunia.com/advisories/48618/\nCustomer Area (Credentials Required)\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=48618\n\nRELEASE DATE:\n2012-03-29\n\nDISCUSS ADVISORY:\nhttp://secunia.com/advisories/48618/#comments\n\nAVAILABLE ON SITE AND IN CUSTOMER AREA:\n * Last Update\n * Popularity\n * Comments\n * Criticality Level\n * Impact\n * Where\n * Solution Status\n * Operating System / Software\n * CVE Reference(s)\n\nhttp://secunia.com/advisories/48618/\n\nONLY AVAILABLE IN CUSTOMER AREA:\n * Authentication Level\n * Report Reliability\n * Secunia PoC\n * Secunia Analysis\n * Systems Affected\n * Approve Distribution\n * Remediation Status\n * Secunia CVSS Score\n * CVSS\n\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=48618\n\nONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI:\n * AUTOMATED SCANNING\n\nhttp://secunia.com/vulnerability_scanning/personal/\nhttp://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/\n\nDESCRIPTION:\nMultiple vulnerabilities have been reported in Google Chrome, where\nsome have an unknown impact and others can be exploited by malicious\npeople to conduct cross-site scripting and spoofing attacks and\ncompromise a user\u0027s system. \n\n1) Some errors exist in the bundled version of Adobe Flash Player. \n\n3) An error in SVG text handling can be exploited to cause an\nout-of-bounds read. \n\n4) An error in text fragment handling can be exploited to cause an\nout-of-bounds read. \n\n5) An error exists within SPDY proxy certificate checking. \n\n6) An off-by-one error exists in OpenType sanitizer. \n\n7) A validation error exists within the handling of certain\nnavigation requests from the renderer. \n\n8) A use-after-free error exists in SVG clipping. \n\n9) An unspecified error in Skia can be exploited to corrupt memory. \n\n10) An error exists in v8. \n\nFor more information see vulnerability #8:\nSA48512\n\nSOLUTION:\nUpgrade to version 18.0.1025.142. \n\nPROVIDED AND/OR DISCOVERED BY:\nThe vendor credits:\n2) Masato Kinugawa\n3) Arthur Gerkis\n4) miaubiz\n5) Leonidas Kontothanassis, Google\n6) Mateusz Jurczyk, Google Security Team\n7) kuzzcc, Sergey Glazunov, PinkiePie, and scarybeasts, Google Chrome\nSecurity Team\n8) Atte Kettunen, OUSPG\n9) Omair\n10) Christian Holler\n\nORIGINAL ADVISORY:\nhttp://googlechromereleases.blogspot.com/2012/03/stable-channel-release-and-beta-channel.html\n\nOTHER REFERENCES:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nDEEP LINKS:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED DESCRIPTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED SOLUTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXPLOIT:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\nprivate users keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2011-3058"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001968"
      },
      {
        "db": "BID",
        "id": "52762"
      },
      {
        "db": "VULHUB",
        "id": "VHN-51003"
      },
      {
        "db": "PACKETSTORM",
        "id": "119897"
      },
      {
        "db": "PACKETSTORM",
        "id": "111803"
      },
      {
        "db": "PACKETSTORM",
        "id": "111455"
      },
      {
        "db": "PACKETSTORM",
        "id": "120820"
      },
      {
        "db": "PACKETSTORM",
        "id": "111469"
      },
      {
        "db": "PACKETSTORM",
        "id": "111449"
      }
    ],
    "trust": 2.52
  },
  "exploit_availability": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "reference": "https://www.scap.org.cn/vuln/vhn-51003",
        "trust": 0.1,
        "type": "unknown"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-51003"
      }
    ]
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2011-3058",
        "trust": 3.1
      },
      {
        "db": "BID",
        "id": "52762",
        "trust": 2.0
      },
      {
        "db": "SECUNIA",
        "id": "48618",
        "trust": 1.8
      },
      {
        "db": "SECUNIA",
        "id": "48691",
        "trust": 1.8
      },
      {
        "db": "SECUNIA",
        "id": "48763",
        "trust": 1.8
      },
      {
        "db": "SECTRACK",
        "id": "1026877",
        "trust": 1.7
      },
      {
        "db": "JVN",
        "id": "JVNVU90360497",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001968",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201203-576",
        "trust": 0.7
      },
      {
        "db": "PACKETSTORM",
        "id": "119897",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "120820",
        "trust": 0.2
      },
      {
        "db": "VULHUB",
        "id": "VHN-51003",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "111803",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "111455",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "111469",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "111449",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-51003"
      },
      {
        "db": "BID",
        "id": "52762"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001968"
      },
      {
        "db": "PACKETSTORM",
        "id": "119897"
      },
      {
        "db": "PACKETSTORM",
        "id": "111803"
      },
      {
        "db": "PACKETSTORM",
        "id": "111455"
      },
      {
        "db": "PACKETSTORM",
        "id": "120820"
      },
      {
        "db": "PACKETSTORM",
        "id": "111469"
      },
      {
        "db": "PACKETSTORM",
        "id": "111449"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201203-576"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-3058"
      }
    ]
  },
  "id": "VAR-201203-0179",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-51003"
      }
    ],
    "trust": 0.01
  },
  "last_update_date": "2025-04-11T21:32:39.512000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "APPLE-SA-2013-03-14-1",
        "trust": 0.8,
        "url": "http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html"
      },
      {
        "title": "HT5642",
        "trust": 0.8,
        "url": "http://support.apple.com/kb/HT5642"
      },
      {
        "title": "HT5672",
        "trust": 0.8,
        "url": "http://support.apple.com/kb/HT5672"
      },
      {
        "title": "HT5642",
        "trust": 0.8,
        "url": "http://support.apple.com/kb/HT5642?viewlocale=ja_JP"
      },
      {
        "title": "HT5672",
        "trust": 0.8,
        "url": "http://support.apple.com/kb/HT5672?viewlocale=ja_JP"
      },
      {
        "title": "Stable Channel Release and Beta Channel Update",
        "trust": 0.8,
        "url": "http://googlechromereleases.blogspot.jp/2012/03/stable-channel-release-and-beta-channel.html"
      },
      {
        "title": "Google Chrome",
        "trust": 0.8,
        "url": "http://www.google.co.jp/chrome/intl/ja/landing_ff_yt.html?hl=ja\u0026hl=ja"
      },
      {
        "title": "Google Chrome Fixes for cross-site scripting vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=114588"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001968"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201203-576"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-79",
        "trust": 1.9
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-51003"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001968"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-3058"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.1,
        "url": "http://googlechromereleases.blogspot.com/2012/03/stable-channel-release-and-beta-channel.html"
      },
      {
        "trust": 1.7,
        "url": "http://lists.apple.com/archives/security-announce/2013/jan/msg00000.html"
      },
      {
        "trust": 1.7,
        "url": "http://lists.apple.com/archives/security-announce/2013/mar/msg00002.html"
      },
      {
        "trust": 1.7,
        "url": "http://www.securityfocus.com/bid/52762"
      },
      {
        "trust": 1.7,
        "url": "http://code.google.com/p/chromium/issues/detail?id=109574"
      },
      {
        "trust": 1.7,
        "url": "http://support.apple.com/kb/ht5642"
      },
      {
        "trust": 1.7,
        "url": "https://oval.cisecurity.org/repository/search/definition/oval%3aorg.mitre.oval%3adef%3a15492"
      },
      {
        "trust": 1.7,
        "url": "http://www.securitytracker.com/id?1026877"
      },
      {
        "trust": 1.7,
        "url": "http://secunia.com/advisories/48618"
      },
      {
        "trust": 1.7,
        "url": "http://secunia.com/advisories/48691"
      },
      {
        "trust": 1.7,
        "url": "http://secunia.com/advisories/48763"
      },
      {
        "trust": 1.7,
        "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74408"
      },
      {
        "trust": 0.9,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-3058"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-3058"
      },
      {
        "trust": 0.8,
        "url": "http://jvn.jp/cert/jvnvu90360497/"
      },
      {
        "trust": 0.3,
        "url": "http://www.google.com/chrome"
      },
      {
        "trust": 0.3,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2011-3058"
      },
      {
        "trust": 0.3,
        "url": "http://secunia.com/psi_30_beta_launch"
      },
      {
        "trust": 0.3,
        "url": "http://secunia.com/vulnerability_intelligence/"
      },
      {
        "trust": 0.3,
        "url": "http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/"
      },
      {
        "trust": 0.3,
        "url": "http://secunia.com/advisories/secunia_security_advisories/"
      },
      {
        "trust": 0.3,
        "url": "http://secunia.com/vulnerability_scanning/personal/"
      },
      {
        "trust": 0.3,
        "url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
      },
      {
        "trust": 0.3,
        "url": "http://secunia.com/advisories/about_secunia_advisories/"
      },
      {
        "trust": 0.2,
        "url": "http://support.apple.com/kb/ht1222"
      },
      {
        "trust": 0.2,
        "url": "https://www.apple.com/support/security/pgp/"
      },
      {
        "trust": 0.2,
        "url": "http://gpgtools.org"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0963"
      },
      {
        "trust": 0.1,
        "url": "https://www.apple.com/itunes/"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0956"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3687"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3632"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0954"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0955"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0948"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-2889"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3621"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0959"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0952"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0958"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3701"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0949"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0962"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0968"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-2857"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-2619"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0950"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0964"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0951"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0974"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-2824"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0953"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3606"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3607"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/48763/#comments"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/48763/"
      },
      {
        "trust": 0.1,
        "url": "http://lists.opensuse.org/opensuse-updates/2012-04/msg00032.html"
      },
      {
        "trust": 0.1,
        "url": "https://ca.secunia.com/?page=viewadvisory\u0026vuln_id=48763"
      },
      {
        "trust": 0.1,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-3064"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2011-3059"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2011-3065"
      },
      {
        "trust": 0.1,
        "url": "http://googlechromereleases.blogspot.com/2012/03/stable-channel-release-a="
      },
      {
        "trust": 0.1,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-3059"
      },
      {
        "trust": 0.1,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-3062"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2011-3060"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2011-3063"
      },
      {
        "trust": 0.1,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-3063"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2011-3064"
      },
      {
        "trust": 0.1,
        "url": "http://creativecommons.org/licenses/by-sa/2.5"
      },
      {
        "trust": 0.1,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-3061"
      },
      {
        "trust": 0.1,
        "url": "http://security.gentoo.org/glsa/glsa-201203-24.xml"
      },
      {
        "trust": 0.1,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-3060"
      },
      {
        "trust": 0.1,
        "url": "http://security.gentoo.org/"
      },
      {
        "trust": 0.1,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-3057"
      },
      {
        "trust": 0.1,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-3065"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2011-3062"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2011-3061"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2011-3057"
      },
      {
        "trust": 0.1,
        "url": "https://bugs.gentoo.org."
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3525"
      },
      {
        "trust": 0.1,
        "url": "http://http//support.apple.com/kb/ht5671"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0976"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3488"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0966"
      },
      {
        "trust": 0.1,
        "url": "http://www.apple.com/support/downloads/"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-2088"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0156"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0969"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0970"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0967"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0971"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0973"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3749"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2013-0333"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3756"
      },
      {
        "trust": 0.1,
        "url": "http://www.postgresql.org/docs/9.1/static/release-9-1-5.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3489"
      },
      {
        "trust": 0.1,
        "url": "https://ca.secunia.com/?page=viewadvisory\u0026vuln_id=48691"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/48691/"
      },
      {
        "trust": 0.1,
        "url": "http://www.gentoo.org/security/en/glsa/glsa-201203-24.xml"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/48691/#comments"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/48618/#comments"
      },
      {
        "trust": 0.1,
        "url": "https://ca.secunia.com/?page=viewadvisory\u0026vuln_id=48618"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/48618/"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-51003"
      },
      {
        "db": "BID",
        "id": "52762"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001968"
      },
      {
        "db": "PACKETSTORM",
        "id": "119897"
      },
      {
        "db": "PACKETSTORM",
        "id": "111803"
      },
      {
        "db": "PACKETSTORM",
        "id": "111455"
      },
      {
        "db": "PACKETSTORM",
        "id": "120820"
      },
      {
        "db": "PACKETSTORM",
        "id": "111469"
      },
      {
        "db": "PACKETSTORM",
        "id": "111449"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201203-576"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-3058"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "VULHUB",
        "id": "VHN-51003"
      },
      {
        "db": "BID",
        "id": "52762"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001968"
      },
      {
        "db": "PACKETSTORM",
        "id": "119897"
      },
      {
        "db": "PACKETSTORM",
        "id": "111803"
      },
      {
        "db": "PACKETSTORM",
        "id": "111455"
      },
      {
        "db": "PACKETSTORM",
        "id": "120820"
      },
      {
        "db": "PACKETSTORM",
        "id": "111469"
      },
      {
        "db": "PACKETSTORM",
        "id": "111449"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201203-576"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-3058"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2012-03-30T00:00:00",
        "db": "VULHUB",
        "id": "VHN-51003"
      },
      {
        "date": "2012-03-28T00:00:00",
        "db": "BID",
        "id": "52762"
      },
      {
        "date": "2012-04-04T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2012-001968"
      },
      {
        "date": "2013-01-30T02:53:29",
        "db": "PACKETSTORM",
        "id": "119897"
      },
      {
        "date": "2012-04-12T03:09:18",
        "db": "PACKETSTORM",
        "id": "111803"
      },
      {
        "date": "2012-04-01T17:52:05",
        "db": "PACKETSTORM",
        "id": "111455"
      },
      {
        "date": "2013-03-15T22:23:48",
        "db": "PACKETSTORM",
        "id": "120820"
      },
      {
        "date": "2012-04-02T05:26:37",
        "db": "PACKETSTORM",
        "id": "111469"
      },
      {
        "date": "2012-04-01T09:50:46",
        "db": "PACKETSTORM",
        "id": "111449"
      },
      {
        "date": "2012-03-30T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201203-576"
      },
      {
        "date": "2012-03-30T22:55:01.353000",
        "db": "NVD",
        "id": "CVE-2011-3058"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2020-04-14T00:00:00",
        "db": "VULHUB",
        "id": "VHN-51003"
      },
      {
        "date": "2015-03-19T09:18:00",
        "db": "BID",
        "id": "52762"
      },
      {
        "date": "2013-04-02T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2012-001968"
      },
      {
        "date": "2020-04-15T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201203-576"
      },
      {
        "date": "2025-04-11T00:51:21.963000",
        "db": "NVD",
        "id": "CVE-2011-3058"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201203-576"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Google Chrome Vulnerable to cross-site scripting attacks",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001968"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "XSS",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201203-576"
      }
    ],
    "trust": 0.6
  }
}