CVE-2011-3060

Опубликовано: 30 мар. 2012

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Уязвимость DoS атаки в Google Chrome через некорректную обработку текстовых фрагментов

Описание

В браузере Google Chrome обнаружена уязвимость, которая связана с некорректной обработкой текстовых фрагментов. Эта уязвимость позволяет злоумышленникам осуществлять DoS атаку, вызывая аварийное завершение работы программы через чтение данных за пределами допустимого диапазона памяти.

Затронутые версии ПО

Google Chrome версии до 18.0.1025.142

Тип уязвимости

DoS атака

Ссылки

http://code.google.com/p/chromium/issues/detail?id=114056
Exploit
Vendor Advisory
http://googlechromereleases.blogspot.com/2012/03/stable-channel-release-and-beta-channel.html
Release Notes
Vendor Advisory
http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
Mailing List
Third Party Advisory
http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html
Mailing List
Third Party Advisory
http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
Mailing List
Third Party Advisory
http://secunia.com/advisories/48618
Not Applicable
http://secunia.com/advisories/48691
Not Applicable
http://secunia.com/advisories/48763
Not Applicable
http://support.apple.com/kb/HT5400
Third Party Advisory
http://support.apple.com/kb/HT5485
Third Party Advisory
http://support.apple.com/kb/HT5503
Third Party Advisory
http://www.securityfocus.com/bid/52762
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1026877
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/74410
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15364
Third Party Advisory
http://code.google.com/p/chromium/issues/detail?id=114056
Exploit
Vendor Advisory
http://googlechromereleases.blogspot.com/2012/03/stable-channel-release-and-beta-channel.html
Release Notes
Vendor Advisory
http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
Mailing List
Third Party Advisory
http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html
Mailing List
Third Party Advisory
http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Версия до 18.0.1025.142 (исключая)

Конфигурация 2

Одно из

cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*

Версия до 10.7 (исключая)

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Версия до 6.0 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 6.0 (исключая)

EPSS

Процентиль: 85%

0.02353

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2011-3060

ubuntu

почти 14 лет назад

Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

CVE-2011-3060

redhat

почти 14 лет назад

Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

CVE-2011-3060

debian

почти 14 лет назад

Google Chrome before 18.0.1025.142 does not properly handle text fragm ...

GHSA-7wmw-86ww-mv98

github

больше 3 лет назад

Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

EPSS

Процентиль: 85%

0.02353

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-125