10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.007 Low
EPSS
Percentile
79.7%
Google Chrome before 19.0.1084.46 on Linux does not properly mitigate an
unspecified flaw in an NVIDIA driver, which has unknown impact and attack
vectors. NOTE: see CVE-2012-3105 for the related MFSA 2012-34 issue in
Mozilla products.
Author | Note |
---|---|
sbeattie | CVE may also affect nvidia drivers, or a separate one may have been assigned |
micahg | Firefox 13 had workarounds for this as well |
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 10.04 | noarch | chromium-browser | < 3.0.1271.97-0ubuntu0.10.04.1 | UNKNOWN |
ubuntu | 11.10 | noarch | chromium-browser | < 3.0.1271.97-0ubuntu0.11.10.1 | UNKNOWN |
ubuntu | 12.04 | noarch | chromium-browser | < 3.0.1271.97-0ubuntu0.12.04.1 | UNKNOWN |
ubuntu | 12.10 | noarch | chromium-browser | < 3.0.1271.97-0ubuntu0.12.10.1 | UNKNOWN |
ubuntu | 10.04 | noarch | firefox | < 13.0+build1-0ubuntu0.10.04.1 | UNKNOWN |
ubuntu | 11.04 | noarch | firefox | < 13.0+build1-0ubuntu0.11.04.1 | UNKNOWN |
ubuntu | 11.10 | noarch | firefox | < 13.0+build1-0ubuntu0.11.10.1 | UNKNOWN |
ubuntu | 10.04 | noarch | thunderbird | < 13.0.1+build1-0ubuntu0.10.04.1 | UNKNOWN |
ubuntu | 11.04 | noarch | thunderbird | < 13.0.1+build1-0ubuntu0.11.04.1 | UNKNOWN |
ubuntu | 11.10 | noarch | thunderbird | < 13.0.1+build1-0ubuntu0.11.10.1 | UNKNOWN |
googlechromereleases.blogspot.com/2012/05/stable-channel-update.html
www.mozilla.org/security/announce/2012/mfsa2012-34.html
launchpad.net/bugs/cve/CVE-2011-3101
nvd.nist.gov/vuln/detail/CVE-2011-3101
security-tracker.debian.org/tracker/CVE-2011-3101
ubuntu.com/security/notices/USN-1463-1
ubuntu.com/security/notices/USN-1463-4
ubuntu.com/security/notices/USN-1463-6
www.cve.org/CVERecord?id=CVE-2011-3101