CVE-2011-3079 The Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168, as used in Mozilla Firefox before 38.0 and other products, does not properly validate messages, which has un...
HighCVSS 10.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168, as used in Mozilla Firefox before 38.0 and other products, does not properly validate messages, which has unspecified impact and attack vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opensuse | = 13.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| Google Chrome | <= 18.0.1025.166 | No fix listed |
| mozilla Firefox | <= 31.6 | No fix listed |
| mozilla Firefox | <= 37.0.2 | No fix listed |
| mozilla seamonkey | <= 2.33.0 | No fix listed |
| mozilla Thunderbird | <= 31.6 | No fix listed |
| mozilla Thunderbird | <= 38.0 | No fix listed |
References
- code.google.com
- googlechromereleases.blogspot.com
- openSUSE-SU-2015:0892 vendor-advisory
- openSUSE-SU-2015:1266 vendor-advisory
- openSUSE-SU-2015:0934 vendor-advisory
- 81645 vdb-entry
- RHSA-2015:1012 vendor-advisory
- 48992 third-party-advisory
- DSA-3260 vendor-advisory
- www.mozilla.org
- 53309 vdb-entry
- 1027001 vdb-entry
- bugzilla.mozilla.org
- chrome-ipc-validation-code-execution(75271) vdb-entry
- oval:org.mitre.oval:def:14964 signature vdb-entry
- www.mozilla.org