CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
Confidence
High
EPSS
Percentile
89.4%
Google Chrome before 4.1.249.1064 does not properly handle HTML5 media, which allows remote attackers to cause a denial of service (memory corruption) and possibly have unspecified other impact via unknown vectors.
Vendor | Product | Version | CPE |
---|---|---|---|
chrome | * | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | |
chrome | 1.0.154.53 | cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:* | |
chrome | 1.0.154.59 | cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:* | |
chrome | 1.0.154.64 | cpe:2.3:a:google:chrome:1.0.154.64:*:*:*:*:*:*:* | |
chrome | 1.0.154.65 | cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:* | |
chrome | 2.0.169.0 | cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:* | |
chrome | 2.0.169.1 | cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:* | |
chrome | 2.0.170.0 | cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:* | |
chrome | 2.0.172.2 | cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:* | |
chrome | 2.0.172.8 | cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:* |
bugs.chromium.org/40487
googlechromereleases.blogspot.com/2010/04/stable-update-bug-and-security-fixes.html
secunia.com/advisories/39651
secunia.com/advisories/41856
www.mandriva.com/security/advisories?name=MDVSA-2011:039
www.ubuntu.com/usn/USN-1006-1
www.vupen.com/english/advisories/2010/1016
www.vupen.com/english/advisories/2010/2722
www.vupen.com/english/advisories/2011/0552
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6878