Lucene search

ChromeCVE-2011-2334

HistoryNov 12, 2019 - 9:15 p.m.

CVE-2011-2334

2019-11-1221:15:10

CWE-416

Chrome

web.nvd.nist.gov

cve-2011-2334

use after free

vulnerability

webkit

google chrome

blink m12

renderlayer

reflections

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

41.2%

JSON

Use after free vulnerability exists in WebKit in Google Chrome before Blink M12 in RenderLayerwhen removing elements with reflections.

Affected configurations

Nvd

Node

googleblinkRange<m12chromium

VendorProductVersionCPE
googleblink*cpe:2.3:a:google:blink:*:*:*:*:*:chromium:*:*

Vendor	Product	Version	CPE
google	blink	*	cpe:2.3:a:google:blink::::::chromium::*

CNA Affected

[
  {
    "product": "Chrome",
    "vendor": "Google",
    "versions": [
      {
        "status": "affected",
        "version": "before Blink M12"
      }
    ]
  }
]

References

trac.webkit.org/changeset/86005

bugs.chromium.org/p/chromium/issues/detail?id=81348

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

41.2%

JSON

Related for CVE-2011-2334