Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2011-3036: Google Chrome may crash when viewing malicious page

CVE-2011-3036 · published 14 years ago

Summary

Versions of Google Chrome earlier than 17.0.963.65 can be tricked by a specially crafted web page into stopping responding, which could interrupt users. The issue occurs when the browser processes certain layout data. Upgrade Chrome to the latest version to eliminate the risk.

What to do

Update google chrome to version 17.0.963.65 or later.
Update apple itunes to version 10.7 or later.
Update apple safari to version 6.0 or later.
Update apple iphone_os to version 6.0 or later.

Affected software

Vendor	Product	Affected versions
google	chrome	< 17.0.963.65 `cpe:2.3:a:google:chrome::::::::`
opensuse	opensuse	12.1 `cpe:2.3:o:opensuse:opensuse:12.1:::::::*`
apple	itunes	< 10.7 `cpe:2.3:a:apple:itunes::::::::`
apple	safari	< 6.0 `cpe:2.3:a:apple:safari::::::::`
apple	iphone_os	< 6.0 `cpe:2.3:o:apple:iphone_os::::::::`

Original advisory text

Google Chrome before 17.0.963.65 does not properly perform a cast of an unspecified variable during handling of line boxes, which allows remote attackers to cause a denial of service or possibly ha...

References

http://code.google.com/p/chromium/issues/detail?id=113258 Vendor Advisory
http://googlechromereleases.blogspot.com/2012/03/chrome-stable-update.html Release Notes Vendor Advisory
http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html Mailing List Third Party Advisory
http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html Mailing List Third Party Advisory
http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00012.html Mailing List Third Party Advisory
http://osvdb.org/79795 Broken Link
http://secunia.com/advisories/48265 Not Applicable
http://secunia.com/advisories/48419 Not Applicable
http://secunia.com/advisories/48527 Not Applicable
http://security.gentoo.org/glsa/glsa-201203-19.xml Third Party Advisory
http://support.apple.com/kb/HT5400 Third Party Advisory
http://support.apple.com/kb/HT5485 Third Party Advisory
http://support.apple.com/kb/HT5503 Third Party Advisory
http://www.securityfocus.com/bid/52271 Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1026759 Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/73647 Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3... Third Party Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

6.8 Medium

Exploitation

2% chance of attack within 30 days

Type

CWE-704Incorrect Type Conversion or Cast

Timeline

Published5 Mar 2012

Updated3 Nov 2026

First seen29 Sep 2026

Sources

CVE-2011-3036 · NVD

Track software like this

Free during beta