PT-2011-4099 · Google · Google Chrome+1

Published 2011-08-02 · Updated 2020-05-21 · CVE-2011-2796

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 13.0.782.107

Description A use-after-free issue in Skia, a component used in Google Chrome, can be exploited by remote attackers to cause a denial of service or potentially have other unspecified impacts. The exact vectors used for the exploitation are not specified.

Recommendations For versions prior to 13.0.782.107, update to version 13.0.782.107 or later to resolve the issue.

Exploit

Fix

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2011-2796

Affected Products

Google Chrome

Skia

References · 8

• 🔥 http://code.google.com/p/chromium/issues/detail?id=87548 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-2796 · Security Note
• https://crbug.com/87548 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68958 · Note
• http://osvdb.org/74246 · Note
• https://chromereleases.googleblog.com/2011/08/stable-channel-update.html · Note
• http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14093 · Note