Lucene search

K
cveChromeCVE-2011-3894
HistoryNov 11, 2011 - 11:55 a.m.

CVE-2011-3894

2011-11-1111:55:02
CWE-119
Chrome
web.nvd.nist.gov
32
cve-2011-3894
google chrome
vp8 decoding
denial of service
memory corruption
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7

Confidence

High

EPSS

0.004

Percentile

73.7%

Google Chrome before 15.0.874.120 does not properly perform VP8 decoding, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted stream.

Affected configurations

Nvd
Node
googlechromeRange<15.0.874.120

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7

Confidence

High

EPSS

0.004

Percentile

73.7%