PT-2012-1658 · Google+2 · Google Chrome+2

Published 2012-05-16 · Updated 2024-06-15 · CVE-2011-3098

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 19.0.1084.46

Description The issue is related to an incorrect search path for the Windows Media Player plug-in in Google Chrome, which could potentially allow local users to gain privileges through a Trojan horse plug-in.

Recommendations For versions prior to 19.0.1084.46, update to version 19.0.1084.46 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2011-3098

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

Affected Products

Google Chrome

Suse

Windows Media Player

References · 2343

• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00009.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10171-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-3098 · Security Note
• http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html · Vendor Advisory
• http://code.google.com/p/chromium/issues/detail?id=124216 · Patch
• https://suse.com/security/cve/CVE-2015-1258 · Note
• https://suse.com/security/cve/CVE-2018-6173 · Note
• https://suse.com/security/cve/CVE-2019-5874 · Note
• https://suse.com/security/cve/CVE-2020-6394 · Note
• https://suse.com/security/cve/CVE-2021-21195 · Note
• https://suse.com/security/cve/CVE-2011-3970 · Note
• https://suse.com/security/cve/CVE-2020-6423 · Note
• https://suse.com/security/cve/CVE-2022-0096 · Note