CVE-2011-0476

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allow remote attackers to cause a denial of service (stack memory corruption) or possibly…

published January 14, 2011

CVSS
—
EPSS
3%
Percentile
84.8
In the wild
Unconfirmed
What it is

⚠️ A crafty PDF could crash your Chrome like a surprise power outage during a binge-watch session! Think of it as a banquet where the kitchen tries to serve too many dishes at once; eventually, the waiter drops everything, leading to a chaotic spill on the floor. In this case, the PDF triggers a stack memory corruption, overwhelming Chrome until it collapses. An attacker could exploit this vulnerability to create a denial of service, causing your browser to crash unexpectedly. While it may not lead to data loss, the inconvenience could be absolutely devastating during critical tasks or online activities, leaving you frustrated and vulnerable.

Put simply

Think of it as a banquet where the kitchen tries to serve too many dishes at once; eventually, the waiter drops everything, leading to a chaotic spill on the floor. In this case, the PDF triggers a stack memory corruption, overwhelming Chrome until it collapses. In Chrome versions prior to 8.0.552.237 and Chrome OS before 8.0.552.344, a flaw exists where a maliciously crafted PDF document can trigger an out-of-memory error, leading to stack memory corruption and possible crashes.

What to do

An attacker could exploit this vulnerability to create a denial of service, causing your browser to crash unexpectedly. While it may not lead to data loss, the inconvenience could be absolutely devastating during critical tasks or online activities, leaving you frustrated and vulnerable. To shield yourself from this vulnerability, ensure you're running the latest version of Google Chrome or Chrome OS by checking for updates. Regularly updating your software keeps you protected against various security threats, including this one. You've got this! Keep your browser up-to-date, and you’ll be a security hero in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02555 · 84.8th percentile
Published
2011-01-14T16:00Z
EPSS history
Timeline
  • 14 JAN 16:00Z
    Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allow remote attackers to cause a denial of service (stack memory corruption) or possibly…
    cvelistv5