CVE-2011-3880

Google Chrome before 15.0.874.102 does not prevent use of an unspecified special character as a delimiter in HTTP headers, which has unknown impact and remote attack vectors.

Score

CVSS 2.0 7.5 High

Status

Modified - chrome-cve-admin@google.com

Published

2011-10-25

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Chrome (Google)

References

• http://code.google.com/p/chromium/issues/detail?id=95992
• http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/70958
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12672