CVE-2011-2850 — Out-of-bounds Read in Google Chrome

CWE-125 — Out-of-bounds Read3 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
0.9%
top 24.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Chrome
Timeline
PublishedSep 19
Latest updateMay 13

Description

Google Chrome before 14.0.835.163 does not properly handle Khmer characters, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDgoogle/chrome< 14.0.835.163

🔴Vulnerability Details

1
GHSA
GHSA-f8xv-7hrv-77qr: Google Chrome before 14↗2022-05-13
▶

💥Exploits & PoCs

1
Exploit-DB
sudo 1.8.0 < 1.8.3p1 - 'sudo_debug' glibc FORTIFY_SOURCE Bypass + Privilege Escalation↗2013-05-01
▶
CVE-2011-2850 — Out-of-bounds Read in Google Chrome | cvebase