CVE-2011-3049Google Chrome vulnerability

2 documents2 sources
Severity
5.0MEDIUMNVD
EPSS
1.9%
top 16.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 23
Latest updateMay 13

Description

Google Chrome before 17.0.963.83 does not properly restrict the extension web request API, which allows remote attackers to cause a denial of service (disrupted system requests) via a crafted extension.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

NVDgoogle/chrome< 17.0.963.83

🔴Vulnerability Details

1
GHSA
GHSA-hj6g-2rmw-3v95: Google Chrome before 172022-05-13
CVE-2011-3049 — Google Chrome vulnerability | cvebase