CVE-2011-3062: google chrome Incorrect Calculation

Modified

Published 30-03-2012Last modified 06-08-2024

Vulnerability summary

CVE-2011-3062 is a medium (CVSS 6.8) Incorrect Calculation vulnerability in google chrome. EPSS estimates a 1.68% chance of exploitation in the next 30 days, higher than 76.9% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 6.8, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

6.8/10

010

Medium · v2.0 (NVD)

EPSS score

1.68%

0%100%

Low · -0.01 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 7 · Related 5

OPENSUSE-SU-2024:10071-1 OPENSUSE-SU-2024:10171-1 OPENSUSE-SU-2024:10230-1 OPENSUSE-SU-2024:12948-1 OPENSUSE-SU-2024:14572-1 RHSA-2012:0515+1 more

Timeline

30-03-2012
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted OpenType file.

CVSS metrics

1 score · 1 source · 1 version

v2.06.8

EPSS trend

Probability

1.68%

Chance of exploitation in the next 30 days

Percentile

77%

Versus all other CVEs

30-day change

Decrease -0.01 pp

From 1.69% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-682Incorrect CalculationThe product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Mozilla4 products

firefox< 10.0.4 | < 12.0
seamonkey< 2.9
thunderbird< 12.0
thunderbird_esr< 10.0.4

Google1 product

chrome< 18.0.1025.142

2 vendors · 5 products

References

16 links

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15488VDB EntrySignatureX Refsource OVALThird Party Advisory
www.securitytracker.com/id?1026877VDB EntryX Refsource SECTRACKThird Party Advisory
osvdb.org/80740VDB EntryX Refsource OSVDBBroken Link
bugzilla.mozilla.org/show_bug.cgi?id=739925X Refsource CONFIRMIssue TrackingThird Party Advisory
secunia.com/advisories/48618Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/48691Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/49055Third Party AdvisoryX Refsource SECUNIANot Applicable
googlechromereleases.blogspot.com/2012/03/stable-channel-release-and-beta-channel.htmlX Refsource CONFIRMRelease NotesVendor Advisory
www.mandriva.com/security/advisories?name=MDVSA-2012:081Vendor AdvisoryX Refsource MANDRIVANot Applicable
code.google.com/p/chromium/issues/detail?id=116524X Refsource CONFIRMVendor Advisory

Show all 16 references

secunia.com/advisories/48972Third Party AdvisoryX Refsource SECUNIANot Applicable
www.mandriva.com/security/advisories?name=MDVSA-2012:066Vendor AdvisoryX Refsource MANDRIVANot Applicable
exchange.xforce.ibmcloud.com/vulnerabilities/74412VDB EntryX Refsource XFThird Party Advisory
secunia.com/advisories/49047Third Party AdvisoryX Refsource SECUNIANot Applicable
www.mozilla.org/security/announce/2012/mfsa2012-31.htmlX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/48763Third Party AdvisoryX Refsource SECUNIANot Applicable