Lucene search

[email protected]CVE-2011-2170

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-2170

2022-10-0316:15:16

CWE-20

[email protected]

web.nvd.nist.gov

cve-2011-2170

google chrome os

security vulnerability

guest mode

local attack vectors

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.8%

JSON

Google Chrome OS before R12 0.12.433.38 Beta, when Guest mode is enabled, does not prevent changes on the about:flags page, which has unspecified impact and local attack vectors.

Affected configurations

NVD

Node

googlechrome_osRange≤0.12.433.35

googlechrome_osMatch0.9.126.0

googlechrome_osMatch0.10.142.3

googlechrome_osMatch0.10.146.1

googlechrome_osMatch0.10.156.1

googlechrome_osMatch0.10.156.4

googlechrome_osMatch0.10.156.18

googlechrome_osMatch0.10.156.20

googlechrome_osMatch0.10.156.30

googlechrome_osMatch0.10.156.34

googlechrome_osMatch0.10.156.36

googlechrome_osMatch0.10.156.46

googlechrome_osMatch0.10.156.50

googlechrome_osMatch0.10.156.54

googlechrome_osMatch0.11.227.0

googlechrome_osMatch0.11.257.3

googlechrome_osMatch0.11.257.14

googlechrome_osMatch0.11.257.18

googlechrome_osMatch0.11.257.32

googlechrome_osMatch0.11.257.39

googlechrome_osMatch0.11.257.44

googlechrome_osMatch0.11.257.91

googlechrome_osMatch0.12.362.2

googlechrome_osMatch0.12.397.0

googlechrome_osMatch0.12.433.9

googlechrome_osMatch0.12.433.14

googlechrome_osMatch0.12.433.22

googlechrome_osMatch0.12.433.28

googlechrome_osMatch8.0.552.342

googlechrome_osMatch8.0.552.343

googlechrome_osMatch8.0.552.344

CPENameOperatorVersion
google:chrome_osgoogle chrome osle0.12.433.35
google:chrome_osgoogle chrome oseq0.9.126.0
google:chrome_osgoogle chrome oseq0.10.142.3
google:chrome_osgoogle chrome oseq0.10.146.1
google:chrome_osgoogle chrome oseq0.10.156.1
google:chrome_osgoogle chrome oseq0.10.156.4
google:chrome_osgoogle chrome oseq0.10.156.18
google:chrome_osgoogle chrome oseq0.10.156.20
google:chrome_osgoogle chrome oseq0.10.156.30
google:chrome_osgoogle chrome oseq0.10.156.34

CPE	Name	Operator	Version
google:chrome_os	google chrome os	le	0.12.433.35
google:chrome_os	google chrome os	eq	0.9.126.0
google:chrome_os	google chrome os	eq	0.10.142.3
google:chrome_os	google chrome os	eq	0.10.146.1
google:chrome_os	google chrome os	eq	0.10.156.1
google:chrome_os	google chrome os	eq	0.10.156.4
google:chrome_os	google chrome os	eq	0.10.156.18
google:chrome_os	google chrome os	eq	0.10.156.20
google:chrome_os	google chrome os	eq	0.10.156.30
google:chrome_os	google chrome os	eq	0.10.156.34

Rows per page:

1-10 of 311

References

googlechromereleases.blogspot.com/2011/05/chrome-os-beta-channel-update_16.html

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.8%

JSON

Related for CVE-2011-2170

nvd1 cvelist1 prion1