NVD

Id
9776  
Name
CVE-2011-3083  
Description
browser/profiles/profile_impl_io_data.cc in Google Chrome before 19.0.1084.46 does not properly handle a malformed ftp URL in the SRC attribute of a VIDEO element, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted web page.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2012-05-15  
Modified Date
2012-10-29  
Seq
2011-3083  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
56120 9776 CVE-2011-3083 http://code.google.com/p/chromium/issues/detail?id=112983  View
56121 9776 CVE-2011-3083 http://code.google.com/p/chromium/issues/detail?id=127924  View
56122 9776 CVE-2011-3083 http://codereview.chromium.org/9372002  View
56123 9776 CVE-2011-3083 http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html  View
56124 9776 CVE-2011-3083 oval:org.mitre.oval:def:15103  View
56125 9776 CVE-2011-3083 GLSA-201205-03  View
56126 9776 CVE-2011-3083 http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/profiles/profile_impl_io_data.cc?r1=121378&r2=121377&pathrev=121378  View
56127 9776 CVE-2011-3083 http://src.chromium.org/viewvc/chrome?view=rev&revision=121378  View
56128 9776 CVE-2011-3083 53540  View
56129 9776 CVE-2011-3083 1027067  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26700 JVNDB-2012-002407 Google Chrome の browser/profiles/profile_impl_io_data.cc におけるサービス運用妨害 (DoS) の脆弱性 Google Chrome の browser/profiles/profile_impl_io_data.cc は、VIDEO 要素の SRC 属性に含まれる不正な形式の ftp URL を適切に処理しないため、サービス運用妨害 (Null ポインタデリファレンスおよびアプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2011-3083 50990 CVE-2011-3083 9776 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002407.html 2012-05-15 2012-05-17 View