NVD Vulnerability Detail

CVE-2011-1302

Summary	Heap-based buffer overflow in the GPU process in Google Chrome before 10.0.648.205 allows remote attackers to execute arbitrary code via unknown vectors.
Publication Date	April 16, 2011, 4:55 a.m.
Registration Date	Jan. 28, 2021, 4:38 p.m.
Last Update	Nov. 21, 2024, 10:26 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:google:chrome::::::::					10.0.648.205

Related information, measures and tools

No	URL	タグ
1	http://code.google.com/p/chromium/issues/detail?id=78524	Issue Tracking Vendor Advisory
2	http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html	Vendor Advisory
3	http://secunia.com/advisories/44141	Third Party Advisory
4	http://www.securityfocus.com/bid/47377	Third Party Advisory VDB Entry
5	http://www.securitytracker.com/id?1025377	Third Party Advisory VDB Entry
6	http://www.vupen.com/english/advisories/2011/1006	Permissions Required
7	https://exchange.xforce.ibmcloud.com/vulnerabilities/66768	Third Party Advisory VDB Entry
8	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14737	Third Party Advisory
9	http://code.google.com/p/chromium/issues/detail?id=78524	Issue Tracking Vendor Advisory
10	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14737	Third Party Advisory
11	https://exchange.xforce.ibmcloud.com/vulnerabilities/66768	Third Party Advisory VDB Entry
12	http://www.vupen.com/english/advisories/2011/1006	Permissions Required
13	http://www.securitytracker.com/id?1025377	Third Party Advisory VDB Entry
14	http://www.securityfocus.com/bid/47377	Third Party Advisory VDB Entry
15	http://secunia.com/advisories/44141	Third Party Advisory
16	http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html	Vendor Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-787	境界外書き込み	https://cwe.mitre.org/data/definitions/787.html

JVN Vulnerability Information

Google Chrome の GPU プロセスにおけるヒープベースのバッファオーバーフローの脆弱性

Title	Google Chrome の GPU プロセスにおけるヒープベースのバッファオーバーフローの脆弱性
Summary	Google Chrome の GPU プロセスには、ヒープベースのバッファオーバーフローの脆弱性が存在します。
Possible impacts	第三者により、任意のコードを実行される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	April 14, 2011, midnight
Registration Date	June 3, 2011, 10:23 a.m.
Last Update	Aug. 31, 2011, 7:56 a.m.

Affected System

Mozilla Foundation

Mozilla Firefox 4.0.1 未満

Google

Google Chrome 10.0.648.205 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2011-1302	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1302
National Vulnerability Database (NVD)
2	CVE-2011-1302	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1302

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
Google
1	Google Chrome	http://www.google.co.jp/chrome/intl/ja/landing_ff_yt.html?hl=ja&hl=ja
2	Stable Channel Update	http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html
Mozilla Foundation Security Advisory
3	MFSA2011-17	http://www.mozilla.org/security/announce/2011/mfsa2011-17.html
Mozilla Foundation セキュリティアドバイザリ
4	MFSA2011-17	http://www.mozilla-japan.org/security/announce/2011/mfsa2011-17.html

その他

No	Name	URL
ISS X-Force Database
1	66768	http://xforce.iss.net/xforce/xfdb/66768
Secunia Advisory
2	SA44141	http://secunia.com/advisories/44141
SecurityFocus
3	47377	http://www.securityfocus.com/bid/47377
SecurityTracker
4	1025377	http://www.securitytracker.com/id?1025377

Change Log

No	Changed Details	Date of change
0	[2011年06月03日] 掲載 [2011年08月31日] 影響を受けるシステム：Mozilla Foundation (MFSA2011-17) の情報を追加ベンダ情報：Mozilla Foundation (MFSA2011-17) を追加	Feb. 17, 2018, 10:37 a.m.