Published: 30/03/2012 Updated: 14/04/2020

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Off-by-one error in the OpenType Sanitizer in Google Chrome prior to 18.0.1025.142 allows remote malicious users to cause a denial of service or possibly have unspecified other impact via a crafted OpenType file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
google chrome
mozilla firefox
mozilla firefox esr
mozilla seamonkey
mozilla thunderbird
mozilla thunderbird esr

Synopsis Critical: firefox security update Type/Severity Security Advisory: Critical Topic Updated firefox packages that fix multiple security issues are nowavailable for Red Hat Enterprise Linux 5 and 6The Red Hat Security Response Team has rated this update as having criticalsecurity impact Common Vulne ...

Synopsis Critical: thunderbird security update Type/Severity Security Advisory: Critical Topic An updated thunderbird package that fixes multiple security issues is nowavailable for Red Hat Enterprise Linux 5 and 6The Red Hat Security Response Team has rated this update as having criticalsecurity impact C ...

Several security issues were fixed in Firefox ...

This update provides compatible ubufox packages for the latest Firefox ...

Several security issues were fixed in Thunderbird ...

Mozilla Foundation Security Advisory 2012-31 Off-by-one error in OpenType Sanitizer Announced April 24, 2012 Reporter Mateusz Jurczyk Impact Critical Products Firefox, Firefox ESR, SeaMonkey, Thunderbird, Thunderbird ESR ...

CWE-682 http://googlechromereleases.blogspot.com/2012/03/stable-channel-release-and-beta-channel.html http://code.google.com/p/chromium/issues/detail?id=116524 http://www.mozilla.org/security/announce/2012/mfsa2012-31.html https://bugzilla.mozilla.org/show_bug.cgi?id=739925 http://osvdb.org/80740 http://secunia.com/advisories/48618 http://www.securitytracker.com/id?1026877 http://secunia.com/advisories/48691 http://secunia.com/advisories/49047 http://secunia.com/advisories/49055 http://secunia.com/advisories/48972 http://secunia.com/advisories/48763 https://exchange.xforce.ibmcloud.com/vulnerabilities/74412 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15488 http://www.mandriva.com/security/advisories?name=MDVSA-2012:081 http://www.mandriva.com/security/advisories?name=MDVSA-2012:066 https://access.redhat.com/errata/RHSA-2012:0515 https://nvd.nist.gov https://usn.ubuntu.com/1430-1/

CVE-2011-3062

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect