CVE-2011-3960 — Out-of-bounds Read in Google Chrome

CWE-125 — Out-of-bounds ReadCWE-121 — Stack-based Buffer Overflow4 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
1.5%
top 18.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Chrome
Timeline
PublishedFeb 9
Latest updateMay 13

Description

Google Chrome before 17.0.963.46 does not properly decode audio data, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDgoogle/chrome< 17.0.963.46

🔴Vulnerability Details

1
GHSA
GHSA-ggxj-x4rp-877f: Google Chrome before 17↗2022-05-13
▶

📋Vendor Advisories

1
Red Hat
libvorbis: Stack-buffer overflow in render_line↗2012-02-09
▶

💬Community

1
Bugzilla
CVE-2011-3960 libvorbis: Stack-buffer overflow in render_line↗2012-02-09
▶
CVE-2011-3960 — Out-of-bounds Read in Google Chrome | cvebase