First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2011-1439

MediumCVSS 6.8/10Last modified Jun 16, 2026

Description

Google Chrome before 11.0.696.57 on Linux does not properly isolate renderer processes, which has unspecified impact and remote attack vectors.

Metrics

CVSS 2.0 6.8/10AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://code.google.com/p/chromium/issues/detail?id=74763Issue Tracking, Patch, Vendor Advisory
http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.htmlVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/67146Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14300Third Party Advisory
http://code.google.com/p/chromium/issues/detail?id=74763Issue Tracking, Patch, Vendor Advisory
http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.htmlVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/67146Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14300Third Party Advisory

Timeline

Published: May 3, 2011
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-14406.8Use-after-free vulnerability in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspe CVE-2011-14416.8Google Chrome before 11.0.696.57 does not properly perform a cast of an unspecified variable during handling of floating select lists, which CVE-2011-14426.8Google Chrome before 11.0.696.57 does not properly handle mutation events, which allows remote attackers to cause a denial of service (node CVE-2011-14436.8Google Chrome before 11.0.696.57 does not properly implement layering, which allows remote attackers to cause a denial of service or possibl CVE-2011-14446.8Race condition in the sandbox launcher implementation in Google Chrome before 11.0.696.57 on Linux allows remote attackers to cause a denial CVE-2011-14456.8Google Chrome before 11.0.696.57 does not properly handle SVG documents, which allows remote attackers to cause a denial of service (out-of-CVE-2011-14465.8Google Chrome before 11.0.696.57 allows remote attackers to spoof the URL bar via vectors involving (1) a navigation error or (2) an interru CVE-2011-14476.8Google Chrome before 11.0.696.57 does not properly handle drop-down lists, which allows remote attackers to cause a denial of service or pos CVE-2011-14486.8Google Chrome before 11.0.696.57 does not properly perform height calculations, which allows remote attackers to cause a denial of service o CVE-2011-14496.8Use-after-free vulnerability in the WebSockets implementation in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial CVE-2011-14505.0Google Chrome before 11.0.696.57 does not properly present file dialogs, which allows remote attackers to cause a denial of service or possi CVE-2011-14517.5Google Chrome before 11.0.696.57 does not properly handle DOM id maps, which allows remote attackers to cause a denial of service or possibl