CVE-2011-0484 — Improper Input Validation in Google Chrome

CWE-20 — Improper Input Validation3 documents3 sources
Severity
7.5HIGHNVD
EPSS
1.8%
top 17.33%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Google ChromeGoogle Chrome OS
Timeline
PublishedJan 14
Latest updateMay 13

Description

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform DOM node removal, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale rendering node."

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶NVDgoogle/chrome< 8.0.552.237
▶NVDgoogle/chrome_os< 8.0.552.344

🔴Vulnerability Details

2
GHSA
GHSA-ghcq-xjm6-j4mp: Google Chrome before 8↗2022-05-13
▶
CVEList
CVE-2011-0484: Google Chrome before 8↗2011-01-14
▶
CVE-2011-0484 — Improper Input Validation in Google | cvebase