Unscored severity · published Jan 14, 2011
CVE-2011-0485
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle speech data, which allows remote attackers to execute arbitrary code via unspecified…
–
CVSS
3.4%
EPSS
No
On KEV
Description
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle speech data, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "stale pointer."
Exploitation
Is it being used?
Exploit prediction (EPSS)3.4% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Chrome · Google
before 8.0.552.237 · source: NVD
CO
Chrome OS · Google
before 8.0.552.344 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0485
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0485
Permissions Required
http://code.google.com/p/chromium/issues/detail?id=68666
Vendor Advisory
http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html
Broken Link
http://osvdb.org/70468
Third Party Advisory
http://secunia.com/advisories/42951
Third Party Advisory
http://www.securityfocus.com/bid/45788
Third Party Advisory
http://www.srware.net/forum/viewtopic.php?f=18&t=2054
More from Chrome
9.8
CVE-2025-10585
Google Chromium V8 Type Confusion Vulnerability
9.8
CVE-2014-0497
Adobe Flash Player Integer Underflow Vulnerablity
9.6
CVE-2024-7971
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-5274
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-4947
Google Chromium V8 Type Confusion Vulnerability