Use-after-free in Google Chrome - CVE-2011-3912

 

Use-after-free in Google Chrome - CVE-2011-3912

Published: December 13, 2011 / Updated: August 11, 2020


Vulnerability identifier: #VU44459
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2011-3912
CWE-ID: CWE-416
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when processing vectors related to SVG filters. A remote attackers can cause a denial of service or possibly have unspecified other impact.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.


Affected software

Google Chrome
Gentoo Linux

How to mitigate CVE-2011-3912

Update to version 16.0.912.63.

Google Chrome - update to 16.0.912.63

External References

Related Security Bulletins