CVE-2011-1413

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Google Chrome before 10.0.648.127 on Linux does not properly mitigate an unspecified flaw in an X server, which allows remote attackers to cause a denial of service (application crash) via vectors involving long messages.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://code.google.com/p/chromium/issues/detail?id=49747Exploit, Issue Tracking, Vendor Advisory
http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.htmlVendor Advisory
http://www.securityfocus.com/bid/46785Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2011/0628Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/65949Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13922Third Party Advisory
http://code.google.com/p/chromium/issues/detail?id=49747Exploit, Issue Tracking, Vendor Advisory
http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.htmlVendor Advisory
http://www.securityfocus.com/bid/46785Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2011/0628Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/65949Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13922Third Party Advisory

Timeline

Published: Mar 11, 2011
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-14144.3Cross-site scripting (XSS) vulnerability in the tibbr web server, as used in TIBCO tibbr 1.0.0 through 1.5.0 and tibbr Service 1.0.0 through CVE-2011-14165.0The Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246 allows attackers to read the contents of memory locations via unk CVE-2011-14176.8Integer overflow in QuickLook, as used in Apple Mac OS X before 10.6.7 and MobileSafari in Apple iOS before 4.2.7 and 4.3.x before 4.3.2, al CVE-2011-14185.0The stateless address autoconfiguration (aka SLAAC) functionality in the IPv6 networking implementation in Apple iOS before 4.3 and Apple TV CVE-2011-14195.8Apache Tomcat 7.x before 7.0.11, when web.xml has no security constraints, does not follow ServletSecurity annotations, which allows remote CVE-2011-14207.2EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak permissions for unspecified files, which allows loc CVE-2011-14216.9EMC NetWorker 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5, when the client push feature is enabled, uses weak permissions for an unspecifi CVE-2011-14224.3Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in EMC RSA Adaptive Authentication On-Premise (AAOP) 2.x, 5.CVE-2011-14234.3Cross-site scripting (XSS) vulnerability in RSA Data Loss Prevention (DLP) Enterprise Manager 8.x before 8.5 SP1 allows remote attackers to CVE-2011-14243.5The default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is u CVE-2011-14255.1xslt.c in XML Security Library (aka xmlsec) before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attacke CVE-2011-14269.3The OpenURLInDefaultBrowser method in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1