CVE-2011-2345
The NPAPI implementation in Google Chrome before 12.0.742.112 does not properly handle strings, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
- Score
- CVSS 2.0 4.3 Medium
- Status
- Modified - chrome-cve-admin@google.com
- Published
- 2011-06-29
- Last modified
- 2024-08-06
- Weaknesses
- CWE-125
Affected products
References
- http://code.google.com/p/chromium/issues/detail?id=77493
- http://googlechromereleases.blogspot.com/2011/06/stable-channel-update_28.html
- http://secunia.com/advisories/45097
- http://www.securitytracker.com/id?1025730
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14411
