CVE-2011-0984

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Google Chrome before 9.0.597.94 does not properly handle plug-ins, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://code.google.com/p/chromium/issues/detail?id=69970Issue Tracking, Patch, Vendor Advisory
http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_08.htmlVendor Advisory
http://secunia.com/advisories/43342Third Party Advisory
http://secunia.com/advisories/43368Third Party Advisory
http://www.debian.org/security/2011/dsa-2166Third Party Advisory
http://www.securityfocus.com/bid/46262Third Party Advisory, VDB Entry
http://www.srware.net/forum/viewtopic.php?f=18&t=2190Patch, Third Party Advisory
http://www.vupen.com/english/advisories/2011/0408Permissions Required
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14719Third Party Advisory
http://code.google.com/p/chromium/issues/detail?id=69970Issue Tracking, Patch, Vendor Advisory
http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_08.htmlVendor Advisory
http://secunia.com/advisories/43342Third Party Advisory
http://secunia.com/advisories/43368Third Party Advisory
http://www.debian.org/security/2011/dsa-2166Third Party Advisory
http://www.securityfocus.com/bid/46262Third Party Advisory, VDB Entry
http://www.srware.net/forum/viewtopic.php?f=18&t=2190Patch, Third Party Advisory
http://www.vupen.com/english/advisories/2011/0408Permissions Required
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14719Third Party Advisory

Timeline

Published: Feb 10, 2011
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-09857.5Google Chrome before 9.0.597.94 does not properly perform process termination upon memory exhaustion, which has unspecified impact and remot CVE-2011-09865.0phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3)CVE-2011-09876.5The PMA_Bookmark_get function in libraries/bookmark.lib.php in phpMyAdmin 2.11.x before 2.11.11.3, and 3.3.x before 3.3.9.2, does not proper CVE-2011-09884.4pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware ex CVE-2011-09895.8The RuntimeHelpers.InitializeArray method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, does no CVE-2011-09905.8Race condition in the FastCopy optimization in the Array.Copy method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x bef CVE-2011-09916.8Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denia CVE-2011-09925.8Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denia CVE-2011-09932.1SUSE Lifecycle Management Server before 1.1 uses world readable postgres credentials, which allows local users to obtain sensitive informati CVE-2011-099410.0Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter (NFR) before 1.0.2 allows remote attackers to execute arbitrary code via CVE-2011-09952.1The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspe CVE-2011-09966.8dhcpcd before 5.2.12 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP messa