CVE-2011-0471 — Improper Input Validation in Google Chrome

CWE-20 — Improper Input Validation10 documents4 sources
Severity
10.0CRITICALNVD
EPSS
2.9%
top 13.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Google ChromeGoogle Chrome OS
Timeline
PublishedJan 14
Latest updateMay 13

Description

The node-iteration implementation in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 does not properly handle pointers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages2 packages

▶NVDgoogle/chrome< 8.0.552.237
▶NVDgoogle/chrome_os< 8.0.552.344

🔴Vulnerability Details

2
GHSA
GHSA-975j-cr58-3mmv: The node-iteration implementation in Google Chrome before 8↗2022-05-13
▶
CVEList
CVE-2011-0471: The node-iteration implementation in Google Chrome before 8↗2011-01-14
▶

💬Community

7
Bugzilla
CVE-2011-0065 Mozilla mChannel use after free (MFSA 2011-13)↗2011-04-28
▶
Bugzilla
CVE-2011-0072 Mozilla use after free flaw (MFSA 2011-12)↗2011-04-28
▶
Bugzilla
CVE-2011-0066 Mozilla mObserverList use after free (MFSA 2011-13)↗2011-04-28
▶
Bugzilla
CVE-2011-0069 Mozilla javascript crash (MFSA 2011-12)↗2011-04-28
▶
Bugzilla
CVE-2011-0071 Mozilla directory traversal via resource protocol (MFSA 2011-16)↗2011-04-28
▶
CVE-2011-0471 — Improper Input Validation in Google | cvebase