CVE-2011-0475

Use-after-free vulnerability in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or…

published January 14, 2011

CVSS
—
EPSS
2%
Percentile
80.6
In the wild
Unconfirmed
What it is

⚠️ A clever PDF could trip up Google Chrome in ways you wouldn’t expect! 🌪️ This use-after-free vulnerability makes it possible for attackers to disrupt the browser's smooth sailing. Think of it like a waiter who tries to serve a table’s order without checking if the dishes they're carrying are still on the menu. If a dish suddenly becomes unavailable, it can lead to a chaotic dining experience! An attacker could send a carefully crafted PDF that crashes Chrome, causing a denial of service that disrupts your browsing session. While the exact impact isn't fully defined, it could lead to unexpected behaviors that affect stability.

Put simply

Think of it like a waiter who tries to serve a table’s order without checking if the dishes they're carrying are still on the menu. If a dish suddenly becomes unavailable, it can lead to a chaotic dining experience! This use-after-free vulnerability occurs when Chrome improperly handles memory after it's been freed, allowing attackers to exploit this oversight through specially designed PDF documents.

What to do

An attacker could send a carefully crafted PDF that crashes Chrome, causing a denial of service that disrupts your browsing session. While the exact impact isn't fully defined, it could lead to unexpected behaviors that affect stability. Update Google Chrome to version 8.0.552.237 or later to patch this vulnerability. If you're using Chrome OS, make sure to upgrade to version 8.0.552.344 or newer. Staying up to date is key! You can tackle this! Keep your browser updated and you’ll be surfing safely in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02008 · 80.6th percentile
Published
2011-01-14T16:00Z
EPSS history
Timeline
  • 14 JAN 16:00Z
    Use-after-free vulnerability in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or…
    cvelistv5