PT-2012-1640 · Google+2 · Google Chrome+2

Christoph Diehl + 3 · Published 2012-04-30 · Updated 2025-11-25 · CVE-2011-3079

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 18.0.1025.168 Mozilla Firefox versions prior to 38.0

Description The Inter-process Communication (IPC) implementation does not properly validate messages, which has unspecified impact and attack vectors.

Recommendations For Google Chrome versions prior to 18.0.1025.168, update to version 18.0.1025.168 or later. For Mozilla Firefox versions prior to 38.0, update to version 38.0 or later.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

ALT-PU-2015-1321

ALT-PU-2015-1463

ALT-PU-2015-1464

ALT-PU-2015-1584

CVE-2011-3079

DSA-3260-1

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:10230-1

OPENSUSE-SU-2024:12948-1

OPENSUSE-SU-2024:14572-1

Affected Products

Alt Linux

Google Chrome

Firefox

References · 4538

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_pdfjs_privilege_escalation.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_proxy_prototype.rb · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0831 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0826 · Security Note
• https://bdu.fstec.ru/vul/2015-10028 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0827 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0832 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0801 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8639 · Security Note
• https://security-tracker.debian.org/tracker/source-package/iceweasel · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0808 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1580 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2708 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1585 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8634 · Security Note