CVE-2011-3022

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-02-16 · updated 2026-06-16
Weakness: CWE-319

Description

translate/translate_manager.cc in Google Chrome before 17.0.963.56 and 19.x before 19.0.1036.7 uses an HTTP session to exchange data for translation, which allows remote attackers to obtain sensitive information by sniffing the network.

Affected products

Google Chrome: before 17.0.963.56; from 19.0 before 19.0.1036.7; 19.0.1028.0, 19.0.1029.0, 19.0.1030.0, 19.0.1031.0, 19.0.1032.0, 19.0.1033.0 (+7) — fixed in 17.0.963.56, 19.0.1036.7

How to fix

Upgrade to a fixed version: Google Chrome 17.0.963.56, 19.0.1036.7. Check the vendor advisory for mitigations.

References

http://code.google.com/p/chromium/issues/detail?id=112236
http://googlechromereleases.blogspot.com/2012/02/chrome-stable-update.html
http://googlechromereleases.blogspot.com/2012/02/dev-channel-update_10.html
http://secunia.com/advisories/48016
http://src.chromium.org/viewvc/chrome?view=rev&revision=120113
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15025
http://code.google.com/p/chromium/issues/detail?id=112236
http://googlechromereleases.blogspot.com/2012/02/chrome-stable-update.html
http://googlechromereleases.blogspot.com/2012/02/dev-channel-update_10.html
http://secunia.com/advisories/48016
http://src.chromium.org/viewvc/chrome?view=rev&revision=120113
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15025

Get alerted when CVE-2011-3022 or the next vulnerability affects your stack