CVE-2011-0779

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Google Chrome before 9.0.597.84 does not properly handle a missing key in an extension, which allows remote attackers to cause a denial of service (application crash) via a crafted extension.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://code.google.com/p/chromium/issues/detail?id=62791Exploit, Issue Tracking, Patch, Vendor Advisory
http://googlechromereleases.blogspot.com/2011/02/stable-channel-update.htmlVendor Advisory
http://secunia.com/advisories/43782Third Party Advisory
http://www.debian.org/security/2011/dsa-2192Third Party Advisory
http://www.vupen.com/english/advisories/2011/0671Permissions Required
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14540Third Party Advisory
http://code.google.com/p/chromium/issues/detail?id=62791Exploit, Issue Tracking, Patch, Vendor Advisory
http://googlechromereleases.blogspot.com/2011/02/stable-channel-update.htmlVendor Advisory
http://secunia.com/advisories/43782Third Party Advisory
http://www.debian.org/security/2011/dsa-2192Third Party Advisory
http://www.vupen.com/english/advisories/2011/0671Permissions Required
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14540Third Party Advisory

Timeline

Published: Feb 4, 2011
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-07806.8The PDF event handler in Google Chrome before 9.0.597.84 does not properly interact with print operations, which allows user-assisted remote CVE-2011-07817.5Google Chrome before 9.0.597.84 does not properly handle autofill profile merging, which has unspecified impact and remote attack vectors.CVE-2011-07825.0Google Chrome before 9.0.597.84 on Mac OS X does not properly mitigate an unspecified flaw in the Mac OS X 10.5 SSL libraries, which allows CVE-2011-07834.3Unspecified vulnerability in Google Chrome before 9.0.597.84 allows user-assisted remote attackers to cause a denial of service (application CVE-2011-07846.8Race condition in Google Chrome before 9.0.597.84 allows remote attackers to execute arbitrary code via vectors related to audio.CVE-2011-07854.3Unspecified vulnerability in the Oracle Help component in Oracle Database Server 11.1.0.7, 11.2.0.1, 11.2.0.2, 10.1.0.5, 10.2.0.3, 10.2.0.4,CVE-2011-07867.6Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, when running on Windows CVE-2011-07875.5Unspecified vulnerability in the Application Service Level Management component in Oracle Database Server 11.1.0.7 and Enterprise Manager Gr CVE-2011-07887.6Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, when running on Windows CVE-2011-07894.3Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integri CVE-2011-07901.7Unspecified vulnerability in Oracle Solaris 9 and 10 allows local users to affect confidentiality via unknown vectors related to wbem.CVE-2011-07914.3Unspecified vulnerability in the Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1