190 lines
5.9 KiB
JSON
Raw Normal View History

2023-04-24 12:24:31 +02:00
{
"id": "CVE-2011-3079",
"sourceIdentifier": "cve@mitre.org",
"published": "2012-05-01T10:12:04.157",
"lastModified": "2018-10-30T16:27:35.843",
"vulnStatus": "Modified",
"descriptions": [
{
"lang": "en",
"value": "The Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168, as used in Mozilla Firefox before 38.0 and other products, does not properly validate messages, which has unspecified impact and attack vectors."
},
{
"lang": "es",
"value": "La implementaci\u00f3n de Inter-process Communication (IPC) en Google Chrome en versiones anteriores a 18.0.1025.168, tal como se utiliza en Mozilla Firefox en versiones anteriores a 38.0 y otros productos, no valida mensajes adecuadamente, lo que tiene un impacto y vectores de ataque no especificados."
}
],
"metrics": {
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-399"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A10BC294-9196-425F-9FB0-B1625465B47F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",
"matchCriteriaId": "03117DF1-3BEC-4B8D-AD63-DBBDB2126081"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"versionEndIncluding": "18.0.1025.166",
"matchCriteriaId": "8D03E315-A771-4A84-B033-9FB257C73460"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
"versionEndIncluding": "37.0.2",
"matchCriteriaId": "7CF7EA41-388C-43CA-82A3-BBED9947CD49"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
"versionEndIncluding": "31.6",
"matchCriteriaId": "00E17F2F-28D8-4DA0-9A25-CE9739D36D7E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2.33.0",
"matchCriteriaId": "6E3C8442-7700-43CD-8BC7-6DAE10A77139"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
"versionEndIncluding": "31.6",
"matchCriteriaId": "C5F70468-E711-4020-B958-61B28EAD48E5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
"versionEndIncluding": "38.0",
"matchCriteriaId": "8E43B2D5-6DB2-44F5-AD7B-31C65E951F32"
}
]
}
]
}
],
"references": [
{
"url": "http://code.google.com/p/chromium/issues/detail?id=117627",
"source": "cve@mitre.org"
},
{
"url": "http://googlechromereleases.blogspot.com/2012/04/stable-channel-update_30.html",
"source": "cve@mitre.org"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html",
"source": "cve@mitre.org"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html",
"source": "cve@mitre.org"
},
{
"url": "http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/81645",
"source": "cve@mitre.org"
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2015-1012.html",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/48992",
"source": "cve@mitre.org"
},
{
"url": "http://www.debian.org/security/2015/dsa-3260",
"source": "cve@mitre.org"
},
{
"url": "http://www.mozilla.org/security/announce/2015/mfsa2015-57.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/53309",
"source": "cve@mitre.org"
},
{
"url": "http://www.securitytracker.com/id?1027001",
"source": "cve@mitre.org"
},
{
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1087565",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/75271",
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14964",
"source": "cve@mitre.org"
},
{
"url": "https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7",
"source": "cve@mitre.org"
}
]
}