Out-of-bounds Read in Google Chrome

CVE-2011-3025

Google Chrome before 17.0.963.56 does not properly parse H.264 data, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Vulnerability class: Buffer Overflow

EPSS: 0.011 (60.8th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (signature, x_refsource_OVAL, Third Party Advisory, vdb-entry)
  • cve@mitre.org (x_refsource_CONFIRM, Patch, Issue Tracking, Vendor Advisory)
  • cve@mitre.org (x_refsource_CONFIRM, Release Notes, Vendor Advisory)
  • cve@mitre.org (x_refsource_SECUNIA, Not Applicable, third-party-advisory)