CVE-2011-1198

2011-03-1100:00:00

ubuntu.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.02

Percentile

89.1%

JSON

The video functionality in Google Chrome before 10.0.648.127 allows remote
attackers to cause a denial of service or possibly have unspecified other
impact via unknown vectors that trigger use of a malformed “out-of-bounds
structure.”

Bugs

<http://code.google.com/p/chromium/issues/detail?id=73026>

Notes

Author	Note
mdeslaur	for ffmpeg, no details as of 2011-06-16 no details, marking as not affected (probably ffmpeg-mt only)

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchchromium-browser< 10.0.648.127~r76697-0ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchchromium-browser< 10.0.648.127~r76697-0ubuntu0.10.10.1UNKNOWN
ubuntu11.04noarchchromium-browser< 10.0.648.127~r76697-0ubuntu1UNKNOWN
ubuntu11.10noarchchromium-browser< 10.0.648.127~r76697-0ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	chromium-browser	< 10.0.648.127~r76697-0ubuntu0.10.04.1	UNKNOWN
ubuntu	10.10	noarch	chromium-browser	< 10.0.648.127~r76697-0ubuntu0.10.10.1	UNKNOWN
ubuntu	11.04	noarch	chromium-browser	< 10.0.648.127~r76697-0ubuntu1	UNKNOWN
ubuntu	11.10	noarch	chromium-browser	< 10.0.648.127~r76697-0ubuntu1	UNKNOWN