CVE-2011-3047: google chrome

Modified

Published 10-03-2012Last modified 06-08-2024

Vulnerability summary

CVE-2011-3047 is a high (CVSS 9.3) vulnerability in google chrome. EPSS estimates a 3.07% chance of exploitation in the next 30 days, higher than 87.6% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 9.3, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

3.07%

0%100%

Low · -0.27 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2 · Related 2

OPENSUSE-SU-2024:10171-1 OPENSUSE-SU-2024:12948-1

Timeline

10-03-2012
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The GPU process in Google Chrome before 17.0.963.79 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) by leveraging an error in the plug-in loading mechanism.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

3.07%

Chance of exploitation in the next 30 days

Percentile

88%

Versus all other CVEs

30-day change

Decrease -0.27 pp

From 3.34% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Google1 product

chrome< 17.0.963.79

Opensuse1 product

opensuseEOL12.1

2 vendors · 2 products

References

11 links

googlechromereleases.blogspot.com/2012/03/chrome-stable-update_10.htmlX Refsource CONFIRMRelease NotesVendor Advisory
secunia.com/advisories/48527Third Party AdvisoryX Refsource SECUNIANot Applicable
www.securityfocus.com/bid/52395VDB EntryX Refsource BIDThird Party Advisory
secunia.com/advisories/48419Third Party AdvisoryX Refsource SECUNIANot Applicable
lists.opensuse.org/opensuse-security-announce/2012-03/msg00012.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
code.google.com/p/chromium/issues/detail?id=117656X Refsource CONFIRMVendor Advisory
code.google.com/p/chromium/issues/detail?id=117620X Refsource CONFIRMVendor Advisory
security.gentoo.org/glsa/glsa-201203-19.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14935VDB EntrySignatureX Refsource OVALThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/73904VDB EntryX Refsource XFThird Party Advisory

Show all 11 references

secunia.com/advisories/48375Third Party AdvisoryX Refsource SECUNIANot Applicable