CVE-2011-2169 — Google Chrome OS vulnerability

CWE-2644 documents4 sources
Severity
7.2HIGHNVD
EPSS
0.0%
top 95.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Chrome OS
Timeline
PublishedMay 24
Latest updateMay 17

Description

Google Chrome OS before R12 0.12.433.38 Beta allows local users to gain privileges by creating a /var/lib/chromeos-aliases.conf file and placing commands in it.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

▶NVDgoogle/chrome_os0.12.433.35+30

🔴Vulnerability Details

2
GHSA
GHSA-v5rm-rc2x-22cx: Google Chrome OS before R12 0↗2022-05-17
▶
CVEList
CVE-2011-2169: Google Chrome OS before R12 0↗2011-05-24
▶

💬Community

1
Bugzilla
CVE-2011-1000 Telepathy-Gabble: Audio and video calls sniffing via crafted google:jingleinfo stanza↗2011-02-20
▶
CVE-2011-2169 — Google Chrome OS vulnerability | cvebase