CVE-2011-1196

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The OGG container implementation in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://code.google.com/p/chromium/issues/detail?id=71788Exploit, Issue Tracking, Patch, Vendor Advisory
http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.htmlVendor Advisory
http://www.securityfocus.com/bid/46785Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2011/0628Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/65960Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14033Third Party Advisory
http://code.google.com/p/chromium/issues/detail?id=71788Exploit, Issue Tracking, Patch, Vendor Advisory
http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.htmlVendor Advisory
http://www.securityfocus.com/bid/46785Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2011/0628Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/65960Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14033Third Party Advisory

Timeline

Published: Mar 11, 2011
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-11977.5Google Chrome before 10.0.648.127 does not properly perform table painting, which allows remote attackers to cause a denial of service or po CVE-2011-11987.5The video functionality in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unspecifi CVE-2011-11997.5Google Chrome before 10.0.648.127 does not properly handle DataView objects, which allows remote attackers to cause a denial of service (app CVE-2011-12006.8Google Chrome before 10.0.648.127 does not properly perform a cast of an unspecified variable during text rendering, which allows remote att CVE-2011-12017.5The context implementation in WebKit, as used in Google Chrome before 10.0.648.127, allows remote attackers to cause a denial of service or CVE-2011-12024.3The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other pro CVE-2011-12037.5Google Chrome before 10.0.648.127 does not properly handle SVG cursors, which allows remote attackers to cause a denial of service or possib CVE-2011-12046.8Google Chrome before 10.0.648.127 does not properly handle attributes, which allows remote attackers to cause a denial of service (DOM tree CVE-2011-12056.9Multiple buffer overflows in unspecified COM objects in Rational Common Licensing 7.0 through 7.1.1.4 in IBM Rational ClearCase 7.0.0.4 thro CVE-2011-120610.0Stack-based buffer overflow in the server process in ibmslapd.exe in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6 CVE-2011-12079.3The ActiveBar1 ActiveX control in the Data Dynamics ActiveBar ActiveX controls, as distributed in ActBar.ocx 1.0.6.5 in IBM Rational System CVE-2011-12087.8IBM solidDB 4.5.x before 4.5.182, 6.0.x before 6.0.1069, 6.1.x and 6.3.x before 6.3 FP8 (aka 6.3.49), and 6.5.x before 6.5 FP4 (aka 6.5.0.4)