CVE-2011-2877

Severity

68%

Complexity

86%

Confidentiality

106%

Google Chrome before 14.0.835.202 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale font."

Google Chrome before 14.0.835.202 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale font."

CVSS 2.0 Base Score 6.8. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:P/I:P/A:P).

Overview

Type

Apple

First reported 13 years ago

2011-10-04 20:55:00

Last updated 4 years ago

2020-05-08 21:22:00

Affected Software

Apple iTunes

Apple Safari

References

http://code.google.com/p/chromium/issues/detail?id=95072

http://googlechromereleases.blogspot.com/2011/10/stable-channel-update.html

Vendor Advisory

APPLE-SA-2012-03-07-1

APPLE-SA-2012-03-07-2

APPLE-SA-2012-03-12-1

48274

48288

48377

1026774

oval:org.mitre.oval:def:14694

http://code.google.com/p/chromium/issues/detail?id=95072

Issue Tracking, Vendor Advisory

APPLE-SA-2012-03-07-1

Mailing List, Third Party Advisory

APPLE-SA-2012-03-07-2

Mailing List, Third Party Advisory

APPLE-SA-2012-03-12-1

Mailing List, Third Party Advisory

48274

Third Party Advisory

48288

Third Party Advisory

48377

Third Party Advisory

1026774

Third Party Advisory, VDB Entry

oval:org.mitre.oval:def:14694

Third Party Advisory

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.