CVE-2011-0985

Published: Feb 10, 2011Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Google Chrome before 9.0.597.94 does not properly perform process termination upon memory exhaustion, which has unspecified impact and remote attack vectors.

Affected (3)

Products: Google: Chrome · Debian: Debian Linux

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Google Chrome	Before 9.0.597.94

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 6.0
Debian Debian Linux	Version 7.0

Related CWEs

CWE-400

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (18)

http://code.google.com/p/chromium/issues/detail?id=70456

Source: cve@mitre.org

Issue TrackingVendor Advisory

http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_08.html

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/43342

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/43368

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2011/dsa-2166

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/46262

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.srware.net/forum/viewtopic.php?f=18&t=2190

Source: cve@mitre.org

PatchThird Party Advisory

http://www.vupen.com/english/advisories/2011/0408

Source: cve@mitre.org

Permissions Required

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14506

Source: cve@mitre.org

Third Party Advisory

http://code.google.com/p/chromium/issues/detail?id=70456