Home > Vulnerability Database > CVE-2011-3094

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2011-3094

Good to know:

Date: May 15, 2012

Google Chrome before 19.0.1084.46 does not properly handle Tibetan text, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Language: C++

Severity Score

8.5

Related Resources (10)

Url: http://code.google.com/p/chromium/issues/detail?id=122586

Url: http://security.gentoo.org/glsa/glsa-201205-03.xml

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15233

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/75599

Url: http://www.securitytracker.com/id?1027067

Url: http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html

Url: http://www.securityfocus.com/bid/53540

Url: http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2011-3094

Url: https://www.mend.io/vulnerability-database/CVE-2011-3094

Severity Score

8.5

Weakness Type (CWE)

Input Validation

CWE-20

Top Fix

Upgrade Version

Upgrade to version 20.0.1098.0

CVSS v3

Base Score:	8.5
Attack Vector (AV):
Attack Complexity (AC):
Privileges Required (PR):
User Interaction (UI):
Scope (S):
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE

CVSS v2

Base Score:	7.5
Access Vector (AV):
Access Complexity (AC):
Authentication (AU):
Confidentiality (C):	HIGH
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Do you need more information?

Contact Us