CVE-2011-1439 : Google Chrome before 11.0.696.57 on Linux does not properly isolate renderer pro

Google Chrome before 11.0.696.57 on Linux does not properly isolate renderer processes, which has unspecified impact and remote attack vectors.

Published 2011-05-03 22:55:01

Updated 2020-05-29 20:21:47

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2011-1439

Google » Chrome
Versions before (<) 11.0.696.57
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A

EPSS FAQ

0.26%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 65 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P	8.6	6.4	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

https://exchange.xforce.ibmcloud.com/vulnerabilities/67146

Google Chrome renderer code execution CVE-2011-1439 Vulnerability Report
Third Party Advisory;VDB Entry
http://code.google.com/p/chromium/issues/detail?id=74763

74763 - Security: Domui process can be ptraced from a compromised renderer leading to sandbox escape - chromium - Monorail
Issue Tracking;Patch;Vendor Advisory
http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html

Chrome Releases: Chrome Stable Update
Vendor Advisory

CVEs referencing this url
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14300

Repository / Oval Repository
Third Party Advisory

Jump to