PT-2011-2829 · Google · Google Chrome

Sam Leffler · Published 2011-02-18 · Updated 2017-08-17 · CVE-2011-1042

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome OS versions prior to 0.9.130.14 Beta

Description A use-after-free issue in Google Chrome OS allows remote attackers to cause a denial of service by providing the name of a hidden WiFi network that does not respond to connection attempts, leading to a daemon crash.

Recommendations For versions prior to 0.9.130.14 Beta, update to version 0.9.130.14 Beta or later to resolve the issue.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2011-1042

Affected Products

Google Chrome

References · 5

• http://codereview.chromium.org/5255012 · Patch
• http://googlechromereleases.blogspot.com/2011/01/chrome-os-beta-channel-update.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1042 · Security Note
• http://code.google.com/p/chromium-os/issues/detail?id=8871 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65556 · Note