PT-2012-1640 · Google+2 · Google Chrome+2

Christoph Diehl + 3 · Publicado 2012-04-30 · Atualizado 2025-11-25 · CVE-2011-3079

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 18.0.1025.168 Mozilla Firefox versions prior to 38.0

Description The Inter-process Communication (IPC) implementation does not properly validate messages, which has unspecified impact and attack vectors.

Recommendations For Google Chrome versions prior to 18.0.1025.168, update to version 18.0.1025.168 or later. For Mozilla Firefox versions prior to 38.0, update to version 38.0 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

ALT-PU-2015-1321

ALT-PU-2015-1463

ALT-PU-2015-1464

ALT-PU-2015-1584

CVE-2011-3079

DSA-3260-1

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:10230-1

OPENSUSE-SU-2024:12948-1

OPENSUSE-SU-2024:14572-1

Produtos afetados

Alt Linux

Google Chrome

Firefox

Referências · 4538

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_pdfjs_privilege_escalation.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_proxy_prototype.rb · Exploit
• https://suse.com/security/cve/CVE-2016-1931 · Nota
• https://suse.com/security/cve/CVE-2015-6775 · Nota
• https://suse.com/security/cve/CVE-2021-37979 · Nota
• https://suse.com/security/cve/CVE-2020-6507 · Nota
• https://suse.com/security/cve/CVE-2014-3178 · Nota
• https://suse.com/security/cve/CVE-2011-3963 · Nota
• https://suse.com/security/cve/CVE-2020-15675 · Nota
• https://suse.com/security/cve/CVE-2016-1683 · Nota
• https://suse.com/security/cve/CVE-2014-1593 · Nota
• https://suse.com/security/cve/CVE-2024-8900 · Nota
• https://suse.com/security/cve/CVE-2021-4067 · Nota
• https://suse.com/security/cve/CVE-2024-3863 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0831 · Nota de Segurança