CVE-2011-3046

Key facts

CVSS score

10.0 (v2.0)

Severity

HIGH

CVSS vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness (CWE)

CWE-79

EPSS score

4.4% (91th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2011-3014)

Published

March 9, 2012

NVD last modified

June 16, 2026

Status

Modified

Affected products

• apple / iphone os
• apple / safari
• google / chrome
• opensuse / opensuse

References

• http://code.google.com/p/chromium/issues/detail?id=117226(Vendor Advisory)
• http://code.google.com/p/chromium/issues/detail?id=117230(Vendor Advisory)
• http://googlechromereleases.blogspot.com/2012/03/chrome-stable-channel-update.html(Release Notes, Vendor Advisory)
• http://lists.apple.com/archives/security-announce/2012/May/msg00000.html(Mailing List, Third Party Advisory)
• http://lists.apple.com/archives/security-announce/2012/May/msg00002.html(Mailing List, Third Party Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00012.html(Mailing List, Third Party Advisory)
• http://secunia.com/advisories/47292(Not Applicable)
• http://secunia.com/advisories/48321(Not Applicable)
• http://secunia.com/advisories/48419(Not Applicable)
• http://secunia.com/advisories/48527(Not Applicable)
• http://security.gentoo.org/glsa/glsa-201203-19.xml(Third Party Advisory)
• http://support.apple.com/kb/HT5282(Third Party Advisory)
• http://www.securityfocus.com/bid/52369(Third Party Advisory, VDB Entry)
• http://www.securitytracker.com/id?1026776(Third Party Advisory, VDB Entry)
• http://www.zdnet.com/blog/security/cansecwest-pwnium-google-chrome-hacked-with-sandbox-bypass/10563(Press/Media Coverage)
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14686(Third Party Advisory)
• https://plus.google.com/u/0/116651741222993143554/posts/5Eq5d9XgFqs(Permissions Required, Vendor Advisory)