CVE-2011-3097

EPSS 3.51%
Veröffentlicht 16.05.2012 00:55:03
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an out-of-bounds write error in the implementation of sampled functions.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Chrome Version <= 19.0.1084.45

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.51%	0.864

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html

Vendor Advisory

http://www.securityfocus.com/bid/53540

http://www.securitytracker.com/id?1027067

http://code.google.com/p/chromium/issues/detail?id=123733

Vendor Advisory

http://code.google.com/p/chromium/issues/detail?id=124182

https://exchange.xforce.ibmcloud.com/vulnerabilities/75602

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15422

https://nvd.nist.gov/vuln/detail/CVE-2011-3097

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-3097

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-3097

EUVD