Google Chrome 19.0.1084.52 buffer overflow [CVE-2011-3106]

VulDB: Google Chrome 19.0.1084.52 buffer overflow [CVE-2011-3106]

General

Google

scipID: 5459
Affected: Google Chrome 19.0.1084.52
Published: 05/24/2012 (Dharani Govindan)
Risk: problematic
Entry: 88.4% complete
Created: 05/30/2012
Updated: 09/03/2012

Summary

A vulnerability was found in Google Chrome 19.0.1084.52 and classified as problematic. This issue affects an unknown function. The manipulation with an unknown input leads to a buffer overflow vulnerability. Impacted is confidentiality, integrity, and availability.

The weakness was shared 05/24/2012 by Dharani Govindan with Chromium development community as 122654 as knowledge base article (Website). The advisory is shared for download at code.google.com. The vendor cooperated in the coordination of the public release. The identification of this vulnerability is CVE-2011-3106 since 08/09/2011. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details are unknown but a private exploit is available.

Upgrading to version 19.0.1084.52 eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability. The vulnerability is also documented in the databases at OSVDB (82251) and Secunia (SA49277).