CVE-2011-3894

2011-11-1100:00:00

ubuntu.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.004

Percentile

73.7%

JSON

Google Chrome before 15.0.874.120 does not properly perform VP8 decoding,
which allows remote attackers to cause a denial of service (memory
corruption) or possibly have unspecified other impact via a crafted stream.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchchromium-browser< 23.0.1271.97-0ubuntu0.10.04.1UNKNOWN
ubuntu11.10noarchchromium-browser< 23.0.1271.97-0ubuntu0.11.10.1UNKNOWN
ubuntu12.04noarchchromium-browser< 20.0.1132.47~r144678-0ubuntu0.12.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	chromium-browser	< 23.0.1271.97-0ubuntu0.10.04.1	UNKNOWN
ubuntu	11.10	noarch	chromium-browser	< 23.0.1271.97-0ubuntu0.11.10.1	UNKNOWN
ubuntu	12.04	noarch	chromium-browser	< 20.0.1132.47~r144678-0ubuntu0.12.04.1	UNKNOWN