CVE-2011-3960
published 2012-02-09CVE-2011-3960: Google Chrome before 17.0.963.46 does not properly decode audio data, which allows remote attackers to cause a denial of service (out-of-bounds read) via…
PriorityP417medium4.3CVSS 2.0
AVNACMAuNCNINAP
EPSS
1.56%
72.7th percentile
Google Chrome before 17.0.963.46 does not properly decode audio data, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chrome | < 17.0.963.46 | 17.0.963.46 |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
libvorbis: Stack-buffer overflow in render_line
vendor_redhat·2012-02-09·CVSS 4.3
CVE-2011-3960 [MEDIUM] CWE-121 libvorbis: Stack-buffer overflow in render_line
libvorbis: Stack-buffer overflow in render_line
Google Chrome before 17.0.963.46 does not properly decode audio data, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Statement: Not vulnerable. This issue did not affect the versions of libvorbis as shipped
with Red Hat Enterprise Linux 4, 5, and 6.
Package: libvorbis (Red Hat Enterprise Linux 4) - Not affected
Package: libvorbis (Red Hat Enterprise Linux 5) - Not affected
Package: libvorbis (Red Hat Enterprise Linux 6) - Not affected
GHSA
GHSA-ggxj-x4rp-877f: Google Chrome before 17
ghsa_unreviewed·2022-05-13
CVE-2011-3960 [MEDIUM] CWE-125 GHSA-ggxj-x4rp-877f: Google Chrome before 17
Google Chrome before 17.0.963.46 does not properly decode audio data, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
No detection rules found.
No public exploits indexed.
http://code.google.com/p/chromium/issues/detail?id=108416http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14921http://code.google.com/p/chromium/issues/detail?id=108416http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14921
2012-02-09
Published