CVE-2011-1807

Published: May 26, 2011Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Google Chrome before 11.0.696.71 does not properly handle blobs, which allows remote attackers to execute arbitrary code via unspecified vectors that trigger an out-of-bounds write.

Affected (1)

Products: Google: Chrome

Google

1 product

Chrome

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Google Chrome	Before 11.0.696.71

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (8)

http://code.google.com/p/chromium/issues/detail?id=82903

Source: chrome-cve-admin@google.com

http://googlechromereleases.blogspot.com/2011/05/stable-channel-update_24.html

Source: chrome-cve-admin@google.com

http://www.securityfocus.com/bid/47963

Source: chrome-cve-admin@google.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14471

Source: chrome-cve-admin@google.com

http://code.google.com/p/chromium/issues/detail?id=82903

Source: af854a3a-2127-422b-91ae-364da2661108

http://googlechromereleases.blogspot.com/2011/05/stable-channel-update_24.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/47963

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14471

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.