CVE-2011-0477 Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle a mismatch in video frame sizes, which allows remote attackers to cause a denial of service (incorrect memory a...
HighCVSS 10.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle a mismatch in video frame sizes, which allows remote attackers to cause a denial of service (incorrect memory access) or possibly have unspecified other impact via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google chrome os | < 8.0.552.344 | 8.0.552.344 |
| Google Chrome | < 8.0.552.237 | 8.0.552.237 |
References
- code.google.com exploit issue-tracking vendor-advisory
- googlechromereleases.blogspot.com vendor-advisory
- 70460 broken-link vdb-entry
- 42951 third-party-advisory
- 45788 third-party-advisory vdb-entry
- www.srware.net third-party-advisory
- chrome-video-frame-code-execution(64668) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:14390 signature third-party-advisory vdb-entry