Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.8
CVE-2011-3070: Google Chrome before 18 may crash or be misused
CVE-2011-3070 · published 14 years ago
Summary
Versions of Google Chrome older than 18.0.1025.151 contain a coding error that can cause the browser to stop working or be taken over by an attacker. This happens when certain web content interacts with the browser’s JavaScript engine. Updating Chrome to the latest version fixes the issue and protects your users.
What to do
- Update google chrome to version 18.0.1025.151 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| chrome |
< 18.0.1025.151 cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |
Original advisory text
Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the Google V...
Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the Google V8 bindings.
References
- http://code.google.com/p/chromium/issues/detail?id=118185 Exploit Vendor Advisory
- http://googlechromereleases.blogspot.com/2012/04/stable-and-beta-channel-updates... Release Notes Vendor Advisory
- http://osvdb.org/81040 Broken Link
- http://secunia.com/advisories/48732 Third Party Advisory
- http://secunia.com/advisories/48749 Third Party Advisory
- http://security.gentoo.org/glsa/glsa-201204-03.xml Third Party Advisory
- http://www.securityfocus.com/bid/52913 Third Party Advisory VDB Entry
- http://www.securitytracker.com/id?1026892 Third Party Advisory VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74630 Third Party Advisory VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3... Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
6.8
Medium
Type
CWE-416Use After Free
Timeline
Published5 Apr 2012
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2011-3070 · NVD
Track software like this
Free during beta