Lucene search

K
cve[email protected]CVE-2011-3098
HistoryMay 16, 2012 - 12:55 a.m.

CVE-2011-3098

2012-05-1600:55:03
CWE-264
web.nvd.nist.gov
31
google chrome
windows
cve-2011-3098
nvd
security vulnerability
privilege escalation
search path
windows media player

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Google Chrome before 19.0.1084.46 on Windows uses an incorrect search path for the Windows Media Player plug-in, which might allow local users to gain privileges via a Trojan horse plug-in in an unspecified directory.

Affected configurations

NVD
Node
opensuseopensuseMatch12.1
Node
googlechromeRange19.0.1084.45
AND
microsoftwindows
CPENameOperatorVersion
opensuse:opensuseopensuseeq12.1

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%