Lucene search

K
cveChromeCVE-2011-2849
HistorySep 19, 2011 - 12:02 p.m.

CVE-2011-2849

2011-09-1912:02:56
CWE-476
Chrome
web.nvd.nist.gov
35
cve-2011-2849
google chrome
websockets
denial of service
null pointer dereference
application crash
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.1

Confidence

Low

EPSS

0.007

Percentile

80.5%

The WebSockets implementation in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors.

Affected configurations

Nvd
Node
googlechromeRange<14.0.835.163
VendorProductVersionCPE
googlechrome*cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.1

Confidence

Low

EPSS

0.007

Percentile

80.5%