CVE-2011-3080 : Race condition in the Inter-process Communication (IPC) implementation in Google

Race condition in the Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168 allows attackers to bypass intended sandbox restrictions via unspecified vectors.

Published 2012-05-01 10:12:04

Updated 2020-04-14 14:13:06

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2011-3080

Google » Chrome
Versions before (<) 18.0.1025.168
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2011-3080

EPSS FAQ

0.25%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 62 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2011-3080

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.6	HIGH	AV:N/AC:H/Au:N/C:C/I:C/A:C	4.9	10.0	NIST
Access Vector: Network Access Complexity: High Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2011-3080

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2011-3080

http://www.securityfocus.com/bid/53309

Google Chrome Prior to 18.0.1025.168 Multiple Security Vulnerabilities
Third Party Advisory;VDB Entry

CVEs referencing this url
http://code.google.com/p/chromium/issues/detail?id=121726

121726 - Sandbox IPC length checking race - chromium - Monorail
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15623

Repository / Oval Repository
Third Party Advisory
http://www.securitytracker.com/id?1027001

Google Chrome Multiple Flaws Let Remote Users Execute Arbitrary Code - SecurityTracker
Third Party Advisory;VDB Entry

CVEs referencing this url
http://osvdb.org/81646

Broken Link
http://googlechromereleases.blogspot.com/2012/04/stable-channel-update_30.html

Chrome Releases: Stable Channel Update
Release Notes;Vendor Advisory

CVEs referencing this url
https://exchange.xforce.ibmcloud.com/vulnerabilities/75272

Google Chrome sandbox IPC code execution CVE-2011-3080 Vulnerability Report
Third Party Advisory;VDB Entry
http://secunia.com/advisories/48992

Sign in
Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2011-3080

Products affected by CVE-2011-3080

Exploit prediction scoring system (EPSS) score for CVE-2011-3080

CVSS scores for CVE-2011-3080

CWE ids for CVE-2011-3080

References for CVE-2011-3080