What’s Vulnerable › Vulnerabilities

CVE-2011-3079

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-05-01 · updated 2026-06-16
• Weakness: CWE-399

Description

The Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168, as used in Mozilla Firefox before 38.0 and other products, does not properly validate messages, which has unspecified impact and attack vectors.

Affected products

• Google Chrome: through 18.0.1025.166
• Mozilla Firefox: through 31.6; through 37.0.2
• Mozilla Seamonkey: through 2.33.0
• Mozilla Thunderbird: through 31.6; through 38.0
• Opensuse: 13.1, 13.2

References

• http://code.google.com/p/chromium/issues/detail?id=117627
• http://googlechromereleases.blogspot.com/2012/04/stable-channel-update_30.html
• http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html
• http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
• http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
• http://osvdb.org/81645
• http://rhn.redhat.com/errata/RHSA-2015-1012.html
• http://secunia.com/advisories/48992
• http://www.debian.org/security/2015/dsa-3260
• http://www.mozilla.org/security/announce/2015/mfsa2015-57.html
• http://www.securityfocus.com/bid/53309
• http://www.securitytracker.com/id?1027001

Get alerted when CVE-2011-3079 or the next vulnerability affects your stack