CVE-2011-1285

Google Chrome < 10.0.648.127 - Memory Corruption via Regular Expression Reentrancy

Title source: llm

Description

The regular-expression functionality in Google Chrome before 10.0.648.127 does not properly implement reentrancy, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

References (6)

Core 6

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/46785

Vendor Advisory x_refsource_confirm

http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html

Third Party Advisory vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14571

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/65969

Issue Tracking, Vendor Advisory x_refsource_confirm

http://code.google.com/p/chromium/issues/detail?id=74662

Permissions Required vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2011/0628

Scores

EPSS 0.0155

EPSS Percentile 72.2%

Details

CWE

CWE-119

Status published

Products (1)

google/chrome < 10.0.648.127

Published Mar 11, 2011

Tracked Since Feb 18, 2026