PT-2011-4124 · Google+1 · Google Chrome+2
Publicado
2011-08-22
·
Atualizado
2020-05-19
·
CVE-2011-2825
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 13.0.782.215
Apple Safari (affected versions not specified)
Apple iTunes (affected versions not specified)
Description
The issue involves a use-after-free vulnerability that can be exploited by remote attackers to cause a denial of service or possibly have other unspecified impacts. This is achieved through vectors involving custom fonts. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited.
Recommendations
For Google Chrome versions prior to 13.0.782.215, update to version 13.0.782.215 or later.
For Apple Safari, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Apple iTunes, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Google Chrome
Safari
Itunes