CVE-2011-3083 - Vulnerability Details - OpenCVE

browser/profiles/profile_impl_io_data.cc in Google Chrome before 19.0.1084.46 does not properly handle a malformed ftp URL in the SRC attribute of a VIDEO element, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted web page.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Google	Chrome

Configuration 1 [-]

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://code.google.com/p/chromium/issues/detail?id=112983
http://code.google.com/p/chromium/issues/detail?id=127924
http://codereview.chromium.org/9372002
http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html
http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html
http://security.gentoo.org/glsa/glsa-201205-03.xml
http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/profiles/profile_impl_io_data.cc?r1=121378&r2=121377&pathrev=121378
http://src.chromium.org/viewvc/chrome?view=rev&revision=121378
http://www.securityfocus.com/bid/53540
http://www.securitytracker.com/id?1027067
https://exchange.xforce.ibmcloud.com/vulnerabilities/75588
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15103

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2012-05-16T00:00:00

Updated: 2024-08-06T23:22:27.360Z

Reserved: 2011-08-09T00:00:00

Link: CVE-2011-3083

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2012-05-16T00:55:01.247

Modified: 2025-04-11T00:51:21.963

Link: CVE-2011-3083

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2012-05-15T00:00:00", "descriptions": [{"lang": "en", "value": "browser/profiles/profile_impl_io_data.cc in Google Chrome before 19.0.1084.46 does not properly handle a malformed ftp URL in the SRC attribute of a VIDEO element, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted web page."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-12-28T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "google-chrome-video-dos(75588)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/75588"}, {"name": "GLSA-201205-03", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://security.gentoo.org/glsa/glsa-201205-03.xml"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://code.google.com/p/chromium/issues/detail?id=112983"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://src.chromium.org/viewvc/chrome?view=rev&revision=121378"}, {"name": "openSUSE-SU-2012:0656", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html"}, {"name": "oval:org.mitre.oval:def:15103", "tags": ["vdb-entry", "signature", "x_refsource_OVAL"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15103"}, {"name": "1027067", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1027067"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://codereview.chromium.org/9372002"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html"}, {"name": "53540", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/53540"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/profiles/profile_impl_io_data.cc?r1=121378&r2=121377&pathrev=121378"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://code.google.com/p/chromium/issues/detail?id=127924"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2011-3083", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "browser/profiles/profile_impl_io_data.cc in Google Chrome before 19.0.1084.46 does not properly handle a malformed ftp URL in the SRC attribute of a VIDEO element, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted web page."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "google-chrome-video-dos(75588)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/75588"}, {"name": "GLSA-201205-03", "refsource": "GENTOO", "url": "http://security.gentoo.org/glsa/glsa-201205-03.xml"}, {"name": "http://code.google.com/p/chromium/issues/detail?id=112983", "refsource": "CONFIRM", "url": "http://code.google.com/p/chromium/issues/detail?id=112983"}, {"name": "http://src.chromium.org/viewvc/chrome?view=rev&revision=121378", "refsource": "CONFIRM", "url": "http://src.chromium.org/viewvc/chrome?view=rev&revision=121378"}, {"name": "openSUSE-SU-2012:0656", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html"}, {"name": "oval:org.mitre.oval:def:15103", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15103"}, {"name": "1027067", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1027067"}, {"name": "http://codereview.chromium.org/9372002", "refsource": "CONFIRM", "url": "http://codereview.chromium.org/9372002"}, {"name": "http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html", "refsource": "CONFIRM", "url": "http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html"}, {"name": "53540", "refsource": "BID", "url": "http://www.securityfocus.com/bid/53540"}, {"name": "http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/profiles/profile_impl_io_data.cc?r1=121378&r2=121377&pathrev=121378", "refsource": "CONFIRM", "url": "http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/profiles/profile_impl_io_data.cc?r1=121378&r2=121377&pathrev=121378"}, {"name": "http://code.google.com/p/chromium/issues/detail?id=127924", "refsource": "CONFIRM", "url": "http://code.google.com/p/chromium/issues/detail?id=127924"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T23:22:27.360Z"}, "title": "CVE Program Container", "references": [{"name": "google-chrome-video-dos(75588)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/75588"}, {"name": "GLSA-201205-03", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://security.gentoo.org/glsa/glsa-201205-03.xml"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://code.google.com/p/chromium/issues/detail?id=112983"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://src.chromium.org/viewvc/chrome?view=rev&revision=121378"}, {"name": "openSUSE-SU-2012:0656", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html"}, {"name": "oval:org.mitre.oval:def:15103", "tags": ["vdb-entry", "signature", "x_refsource_OVAL", "x_transferred"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15103"}, {"name": "1027067", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1027067"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://codereview.chromium.org/9372002"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html"}, {"name": "53540", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/53540"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/profiles/profile_impl_io_data.cc?r1=121378&r2=121377&pathrev=121378"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://code.google.com/p/chromium/issues/detail?id=127924"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2011-3083", "datePublished": "2012-05-16T00:00:00", "dateReserved": "2011-08-09T00:00:00", "dateUpdated": "2024-08-06T23:22:27.360Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", "matchCriteriaId": "B3A4D7B1-E4F5-4FAF-8F10-827335C7C454", "versionEndIncluding": "19.0.1084.45", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "browser/profiles/profile_impl_io_data.cc in Google Chrome before 19.0.1084.46 does not properly handle a malformed ftp URL in the SRC attribute of a VIDEO element, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted web page."}, {"lang": "es", "value": "browser/profiles/profile_impl_io_data.cc en Google Chrome anteriores a v19.0.1084.46 no gestionan de forma adecuada una URL de FTP mal escrita en el atributo SRC de un elemento v\u00eddeo, lo que permite a atacantes remotos a provocar una denegaci\u00f3n de servicio (desreferencia a puntero Null y ca\u00edda de la aplicaci\u00f3n) a trav\u00e9s de una p\u00e1gina Web manipulada."}], "id": "CVE-2011-3083", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2012-05-16T00:55:01.247", "references": [{"source": "cve@mitre.org", "url": "http://code.google.com/p/chromium/issues/detail?id=112983"}, {"source": "cve@mitre.org", "url": "http://code.google.com/p/chromium/issues/detail?id=127924"}, {"source": "cve@mitre.org", "url": "http://codereview.chromium.org/9372002"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html"}, {"source": "cve@mitre.org", "url": "http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html"}, {"source": "cve@mitre.org", "url": "http://security.gentoo.org/glsa/glsa-201205-03.xml"}, {"source": "cve@mitre.org", "url": "http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/profiles/profile_impl_io_data.cc?r1=121378&r2=121377&pathrev=121378"}, {"source": "cve@mitre.org", "url": "http://src.chromium.org/viewvc/chrome?view=rev&revision=121378"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/53540"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1027067"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/75588"}, {"source": "cve@mitre.org", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15103"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://code.google.com/p/chromium/issues/detail?id=112983"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://code.google.com/p/chromium/issues/detail?id=127924"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://codereview.chromium.org/9372002"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://security.gentoo.org/glsa/glsa-201205-03.xml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/profiles/profile_impl_io_data.cc?r1=121378&r2=121377&pathrev=121378"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://src.chromium.org/viewvc/chrome?view=rev&revision=121378"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/53540"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1027067"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/75588"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15103"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}