#VU44414 Stack-based buffer overflow in Google Chrome - CVE-2011-3922

 

#VU44414 Stack-based buffer overflow in Google Chrome - CVE-2011-3922

Published: January 7, 2012 / Updated: August 11, 2020


Vulnerability identifier: #VU44414
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2011-3922
CWE-ID: CWE-121
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
Google Chrome
Software vendor:
Google

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing vectors related to glyph handling. A remote unauthenticated attacker can trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Remediation

Update to version 16.0.912.75.

External links