Lucene search

MitreCVE-2011-0478

HistoryJan 14, 2011 - 5:00 p.m.

CVE-2011-0478

2011-01-1417:00:02

CWE-20

mitre

web.nvd.nist.gov

cve-2011-0478

google chrome

chrome os

denial of service

vulnerability

svg

stale pointer

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

High

EPSS

0.06

Percentile

93.6%

JSON

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle SVG use elements, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a “stale pointer.”

Affected configurations

Nvd

Node

googlechrome_osRange<8.0.552.344

Node

googlechromeRange<8.0.552.237

VendorProductVersionCPE
googlechrome_os*cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*
googlechrome*cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	chrome_os	*	cpe:2.3:o:google:chrome_os::::::::
google	chrome	*	cpe:2.3:a:google:chrome::::::::

References

code.google.com/p/chromium/issues/detail?id=67363

googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html

osvdb.org/70461

secunia.com/advisories/42951

www.securityfocus.com/bid/45788

www.srware.net/forum/viewtopic.php?f=18&t=2054

exchange.xforce.ibmcloud.com/vulnerabilities/64669

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14191

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

High

EPSS

0.06

Percentile

93.6%

JSON

Related for CVE-2011-0478