Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.8
CVE-2011-3052: Google Chrome before 17.0.963.83 can crash from web content
CVE-2011-3052 · published 14 years ago
Summary
Web pages that use certain graphics features can cause Google Chrome versions earlier than 17.0.963.83 to run out of memory and stop working. This may affect users on OpenSUSE systems that run these Chrome versions. Updating Chrome to a newer version fixes the issue.
What to do
- Update google chrome to version 18.0.1025.142 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| chrome |
< 18.0.1025.142 cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |
|
| opensuse | opensuse |
12.1 cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:* |
Original advisory text
The WebGL implementation in Google Chrome before 17.0.963.83 does not properly handle CANVAS elements, which allows remote attackers to cause a denial of service (memory corruption) or possibly hav...
The WebGL implementation in Google Chrome before 17.0.963.83 does not properly handle CANVAS elements, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
References
- http://code.google.com/p/chromium/issues/detail?id=116637 Exploit Vendor Advisory
- http://googlechromereleases.blogspot.com/2012/03/stable-channel-update_21.html Release Notes Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00000.html Mailing List Third Party Advisory
- http://osvdb.org/80290 Broken Link
- http://secunia.com/advisories/48512 Not Applicable
- http://secunia.com/advisories/48527 Not Applicable
- http://security.gentoo.org/glsa/glsa-201203-19.xml Third Party Advisory
- http://www.securityfocus.com/bid/52674 Third Party Advisory VDB Entry
- http://www.securitytracker.com/id?1026841 Third Party Advisory VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74212 Third Party Advisory VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3... Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
6.8
Medium
Type
CWE-119Buffer Overflow
Timeline
Published22 Mar 2012
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2011-3052 · NVD
Track software like this
Free during beta