CVE-2011-1200

MediumCVSS 6.8/10Last modified Jun 16, 2026

Description

Google Chrome before 10.0.648.127 does not properly perform a cast of an unspecified variable during text rendering, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.

Metrics

CVSS 2.0 6.8/10AV:N/AC:M/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-704

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://code.google.com/p/chromium/issues/detail?id=73134Exploit, Issue Tracking, Patch, Vendor Advisory
http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.htmlVendor Advisory
http://www.securityfocus.com/bid/46785Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2011/0628Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/65964Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14419Third Party Advisory
http://code.google.com/p/chromium/issues/detail?id=73134Exploit, Issue Tracking, Patch, Vendor Advisory
http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.htmlVendor Advisory
http://www.securityfocus.com/bid/46785Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2011/0628Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/65964Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14419Third Party Advisory

Timeline

Published: Mar 11, 2011
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-12017.5The context implementation in WebKit, as used in Google Chrome before 10.0.648.127, allows remote attackers to cause a denial of service or CVE-2011-12024.3The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other pro CVE-2011-12037.5Google Chrome before 10.0.648.127 does not properly handle SVG cursors, which allows remote attackers to cause a denial of service or possib CVE-2011-12046.8Google Chrome before 10.0.648.127 does not properly handle attributes, which allows remote attackers to cause a denial of service (DOM tree CVE-2011-12056.9Multiple buffer overflows in unspecified COM objects in Rational Common Licensing 7.0 through 7.1.1.4 in IBM Rational ClearCase 7.0.0.4 thro CVE-2011-120610.0Stack-based buffer overflow in the server process in ibmslapd.exe in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6 CVE-2011-12079.3The ActiveBar1 ActiveX control in the Data Dynamics ActiveBar ActiveX controls, as distributed in ActBar.ocx 1.0.6.5 in IBM Rational System CVE-2011-12087.8IBM solidDB 4.5.x before 4.5.182, 6.0.x before 6.0.1069, 6.1.x and 6.3.x before 6.3 FP8 (aka 6.3.49), and 6.5.x before 6.5 FP4 (aka 6.5.0.4)CVE-2011-12094.3IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.17 uses a weak WS-Security XML encryption algorithm, which m CVE-2011-12139.3Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrar CVE-2011-12149.3Stack-based buffer overflow in rtfsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execut CVE-2011-12159.3Stack-based buffer overflow in mw8sr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execut