NVD Vulnerability Detail

CVE-2011-3065

Summary	Skia, as used in Google Chrome before 18.0.1025.142, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
Publication Date	March 31, 2012, 7:55 a.m.
Registration Date	Jan. 28, 2021, 4:39 p.m.
Last Update	Nov. 21, 2024, 10:29 a.m.

CVSS2.0 : MEDIUM
Score	6.8
Vector	AV:N/AC:M/Au:N/C:P/I:P/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	低
可用性への影響(A)	低
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	はい

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:google:chrome::::::::					18.0.1025.142

Related information, measures and tools

No	URL	タグ
1	http://code.google.com/p/chromium/issues/detail?id=117588	Exploit Vendor Advisory
2	http://googlechromereleases.blogspot.com/2012/03/stable-channel-release-and-beta-channel.html	Release Notes Vendor Advisory
3	http://osvdb.org/80743	Broken Link
4	http://secunia.com/advisories/48618	Third Party Advisory
5	http://secunia.com/advisories/48691	Third Party Advisory
6	http://secunia.com/advisories/48763	Third Party Advisory
7	http://www.securityfocus.com/bid/52762	Third Party Advisory VDB Entry
8	http://www.securitytracker.com/id?1026877	Third Party Advisory VDB Entry
9	https://exchange.xforce.ibmcloud.com/vulnerabilities/74415	Third Party Advisory VDB Entry
10	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15415	Third Party Advisory
11	http://code.google.com/p/chromium/issues/detail?id=117588	Exploit Vendor Advisory
12	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15415	Third Party Advisory
13	https://exchange.xforce.ibmcloud.com/vulnerabilities/74415	Third Party Advisory VDB Entry
14	http://www.securitytracker.com/id?1026877	Third Party Advisory VDB Entry
15	http://www.securityfocus.com/bid/52762	Third Party Advisory VDB Entry
16	http://secunia.com/advisories/48763	Third Party Advisory
17	http://secunia.com/advisories/48691	Third Party Advisory
18	http://secunia.com/advisories/48618	Third Party Advisory
19	http://osvdb.org/80743	Broken Link
20	http://googlechromereleases.blogspot.com/2012/03/stable-channel-release-and-beta-channel.html	Release Notes Vendor Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-190	整数オーバーフローまたはラップアラウンド	https://cwe.mitre.org/data/definitions/190.html

JVN Vulnerability Information

Google Chrome で使用される Skia におけるサービス運用妨害 (メモリ破損) の脆弱性

Title	Google Chrome で使用される Skia におけるサービス運用妨害 (メモリ破損) の脆弱性
Summary	Google Chrome で使用される Skia には、サービス運用妨害 (メモリ破損) 状態となる、またはその他の詳細不明な影響を受ける脆弱性が存在します。
Possible impacts	第三者により、サービス運用妨害 (メモリ破損) 状態にされる、またはその他の詳細不明な影響を受ける可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	March 28, 2012, midnight
Registration Date	April 4, 2012, 11:50 a.m.
Last Update	April 4, 2012, 11:50 a.m.

Affected System

Google

Google Chrome 18.0.1025.142 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2011-3065	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3065
National Vulnerability Database (NVD)
2	CVE-2011-3065	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3065

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
Google
1	Google Chrome	http://www.google.co.jp/chrome/intl/ja/landing_ff_yt.html?hl=ja&hl=ja
2	Stable Channel Release and Beta Channel Update	http://googlechromereleases.blogspot.jp/2012/03/stable-channel-release-and-beta-channel.html

Change Log

No	Changed Details	Date of change
0	[2012年04月04日] 掲載	Feb. 17, 2018, 10:37 a.m.