CVEvulnerability
CVE-2011-3098
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-05-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Google Chrome before 19.0.1084.46 on Windows uses an incorrect search path for the Windows Media Player plug-in, which might allow local users to gain privileges via a Trojan horse plug-in in an unspecified directory.
Affected configurations
• opensuse opensuse 12.1
• google chrome (<= 19.0.1084.45)
Related
Weakness · not in database (1)
References
- http://code.google.com/p/chromium/issues/detail?id=124216 Issue Tracking, Patch
- http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00009.html Third Party Advisory
- http://www.securityfocus.com/bid/53540 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1027067 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75603 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15618 oval.cisecurity.org
- http://code.google.com/p/chromium/issues/detail?id=124216 Issue Tracking, Patch
- http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00009.html Third Party Advisory
- http://www.securityfocus.com/bid/53540 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1027067 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75603 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15618 oval.cisecurity.org