CVEvulnerability
CVE-2011-3079
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-05-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
The Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168, as used in Mozilla Firefox before 38.0 and other products, does not properly validate messages, which has unspecified impact and attack vectors.
Affected configurations
• opensuse opensuse 13.1
• opensuse opensuse 13.2
• google chrome (<= 18.0.1025.166)
• mozilla firefox (<= 31.6)
• mozilla firefox (<= 37.0.2)
• mozilla seamonkey (<= 2.33.0)
• mozilla thunderbird (<= 31.6)
• mozilla thunderbird (<= 38.0)
Related
Weakness · not in database (1)
References
- http://code.google.com/p/chromium/issues/detail?id=117627 code.google.com
- http://googlechromereleases.blogspot.com/2012/04/stable-channel-update_30.html googlechromereleases.blogspot.com
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html lists.opensuse.org
- http://osvdb.org/81645 osvdb.org
- http://rhn.redhat.com/errata/RHSA-2015-1012.html rhn.redhat.com
- http://secunia.com/advisories/48992 secunia.com
- http://www.debian.org/security/2015/dsa-3260 www.debian.org
- http://www.mozilla.org/security/announce/2015/mfsa2015-57.html www.mozilla.org
- http://www.securityfocus.com/bid/53309 www.securityfocus.com
- http://www.securitytracker.com/id?1027001 www.securitytracker.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=1087565 bugzilla.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75271 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14964 oval.cisecurity.org
- https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7 www.mozilla.org
- http://code.google.com/p/chromium/issues/detail?id=117627 code.google.com
- http://googlechromereleases.blogspot.com/2012/04/stable-channel-update_30.html googlechromereleases.blogspot.com
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html lists.opensuse.org
- http://osvdb.org/81645 osvdb.org
- http://rhn.redhat.com/errata/RHSA-2015-1012.html rhn.redhat.com
- http://secunia.com/advisories/48992 secunia.com
- http://www.debian.org/security/2015/dsa-3260 www.debian.org
- http://www.mozilla.org/security/announce/2015/mfsa2015-57.html www.mozilla.org
- http://www.securityfocus.com/bid/53309 www.securityfocus.com
- http://www.securitytracker.com/id?1027001 www.securitytracker.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=1087565 bugzilla.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75271 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14964 oval.cisecurity.org
- https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7 www.mozilla.org