CVE-2011-3928 — Use After Free in Google Chrome

CWE-416 — Use After Free3 documents3 sources
Severity
7.5HIGHNVD
EPSS
1.9%
top 16.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Apple Iphone OSApple SafariGoogle Chrome
Timeline
PublishedJan 24
Latest updateMay 13

Description

Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM handling.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages3 packages

▶NVDgoogle/chrome< 16.0.912.77
▶NVDapple/safari< 5.1.4
▶NVDapple/iphone_os< 5.1

🔴Vulnerability Details

1
GHSA
GHSA-r85w-hx76-5p6v: Use-after-free vulnerability in Google Chrome before 16↗2022-05-13
▶

💬Community

1
Bugzilla
CVE-2010-3928 rubygem-rvm: escape sequence injection vulnerability↗2011-01-20
▶