#VU44216 Type conversion in Google Chrome - CVE-2011-3037 

 

#VU44216 Type conversion in Google Chrome - CVE-2011-3037

Published: March 5, 2012 / Updated: August 11, 2020


Vulnerability identifier: #VU44216
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2011-3037
CWE-ID: CWE-704
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
Google Chrome
Software vendor:
Google

Description

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Google Chrome before 17.0.963.65 does not properly perform casts of unspecified variables during the splitting of anonymous blocks, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.


Remediation

Install update from vendor's website.

External links