CVE-2011-3970

Key facts

CVSS score

4.3 (v2.0)

Severity

MEDIUM

CVSS vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Weakness (CWE)

CWE-125

EPSS score

1.8% (78th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2011-3923)

Published

February 9, 2012

NVD last modified

June 16, 2026

Status

Modified

Affected products

• google / chrome
• suse / linux enterprise desktop
• suse / linux enterprise desktop
• suse / linux enterprise server
• suse / linux enterprise server
• suse / linux enterprise server
• suse / linux enterprise server
• suse / linux enterprise server
• suse / linux enterprise software development kit
• suse / linux enterprise software development kit
• xmlsoft / libxslt

Certified products that may be affected

2 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

• SUSE Linux Enterprise Server 11 Service Pack 2 on IBM System z - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0852-2013 - archived
• SUSE Linux Enterprise Server 11 Service Pack 2 including KVM virtualization - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0787-2013 - archived

References

• http://code.google.com/p/chromium/issues/detail?id=110277
• http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14818
• https://www.suse.com/support/update/announcement/2013/suse-su-20131654-1.html
• https://www.suse.com/support/update/announcement/2013/suse-su-20131656-1.html