NVD

Id
9740  
Name
CVE-2011-3046  
Description
The extension subsystem in Google Chrome before 17.0.963.78 does not properly handle history navigation, which allows remote attackers to execute arbitrary code by leveraging a "Universal XSS (UXSS)" issue.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2012-03-08  
Modified Date
2012-08-13  
Seq
2011-3046  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
55801 9740 CVE-2011-3046 http://code.google.com/p/chromium/issues/detail?id=117226  View
55802 9740 CVE-2011-3046 http://code.google.com/p/chromium/issues/detail?id=117230  View
55803 9740 CVE-2011-3046 http://googlechromereleases.blogspot.com/2012/03/chrome-stable-channel-update.html  View
55804 9740 CVE-2011-3046 APPLE-SA-2012-05-07-1  View
55805 9740 CVE-2011-3046 APPLE-SA-2012-05-09-2  View
55806 9740 CVE-2011-3046 oval:org.mitre.oval:def:14686  View
55807 9740 CVE-2011-3046 GLSA-201203-19  View
55808 9740 CVE-2011-3046 http://support.apple.com/kb/HT5282  View
55809 9740 CVE-2011-3046 http://www.zdnet.com/blog/security/cansecwest-pwnium-google-chrome-hacked-with-sandbox-bypass/10563  View
55810 9740 CVE-2011-3046 https://plus.google.com/u/0/116651741222993143554/posts/5Eq5d9XgFqs  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26026 JVNDB-2012-001733 WebKit の拡張サブシステムにおける任意のコードを実行される脆弱性 WebKit の拡張サブシステムは、履歴のナビゲーションを適切に処理しないため、任意のコードを実行される脆弱性が存在します。 CVE-2011-3046 50953 CVE-2011-3046 9740 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001733.html 2012-03-08 2012-05-11 View