#VU44216 Type conversion in Google Chrome - CVE-2011-3037
Published: March 5, 2012 / Updated: August 11, 2020
Vulnerability identifier: #VU44216
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2011-3037
CWE-ID: CWE-704
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
Google Chrome
Google Chrome
Software vendor:
Google
Description
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
Google Chrome before 17.0.963.65 does not properly perform casts of unspecified variables during the splitting of anonymous blocks, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.
Remediation
Install update from vendor's website.
External links
- http://code.google.com/p/chromium/issues/detail?id=113439
- http://code.google.com/p/chromium/issues/detail?id=114924
- http://code.google.com/p/chromium/issues/detail?id=115028
- http://googlechromereleases.blogspot.com/2012/03/chrome-stable-update.html
- http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
- http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html
- http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00012.html
- http://osvdb.org/79796
- http://secunia.com/advisories/48265
- http://secunia.com/advisories/48419
- http://secunia.com/advisories/48527
- http://security.gentoo.org/glsa/glsa-201203-19.xml
- http://support.apple.com/kb/HT5400
- http://support.apple.com/kb/HT5485
- http://support.apple.com/kb/HT5503
- http://www.securityfocus.com/bid/52271
- http://www.securitytracker.com/id?1026759
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73648
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14397