CVE-2011-2170 — Improper Input Validation in Google Chrome OS

CWE-20 — Improper Input Validation3 documents3 sources
Severity
4.4MEDIUMNVD
EPSS
0.0%
top 95.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Chrome OS
Timeline
PublishedMay 24
Latest updateMay 17

Description

Google Chrome OS before R12 0.12.433.38 Beta, when Guest mode is enabled, does not prevent changes on the about:flags page, which has unspecified impact and local attack vectors.

CVSS vector

AV:L/AC:M/C:P/I:P/A:PExploitability: 3.4 | Impact: 6.4

Affected Packages1 packages

▶NVDgoogle/chrome_os0.12.433.35+30

🔴Vulnerability Details

2
GHSA
GHSA-p57q-wxx6-h3r6: Google Chrome OS before R12 0↗2022-05-17
▶
CVEList
CVE-2011-2170: Google Chrome OS before R12 0↗2011-05-24
▶
CVE-2011-2170 — Improper Input Validation in Google | cvebase