Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

CVE-2011-3889: Chrome Web Audio may let remote attacker crash browser

CVE-2011-3889 · published 15 years ago
Summary

The Web Audio feature in Google Chrome versions before 15.0.874.102 can be tricked into overflowing memory, which could cause the browser to stop working. This could be triggered by a malicious website or link, potentially disrupting work. Updating Chrome to version 15.0.874.102 or later fixes the problem.

What to do
  • Update google chrome to version 15.0.874.102 or later.
Affected software
VendorProductAffected versions
google chrome < 15.0.874.102
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Original advisory text
Heap-based buffer overflow in the Web Audio implementation in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via un...
Heap-based buffer overflow in the Web Audio implementation in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
1% chance of attack within 30 days
Type
CWE-787Out-of-bounds Write
Timeline
Published25 Oct 2011
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2011-3889 · NVD
Track software like this
Free during beta