CVE-2011-1291
Google Chrome before 10.0.648.204 does not properly handle base strings, which allows remote...
Google Chrome before 10.0.648.204 does not properly handle base strings, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "buffer error."
Exploit likelihood
What each source reports
NVD Score used
Google Chrome before 10.0.648.204 does not properly handle base strings, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "buffer error."
- Record
CVE-2011-1291- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-120
- Updated
- 2026-11-02
CVE List No score
Google Chrome before 10.0.648.204 does not properly handle base strings, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "buffer error."
- Record
CVE-2011-1291- Updated
- 2026-11-02
EUVDEUVD-2011-1299 No score
Google Chrome before 10.0.648.204 does not properly handle base strings, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "buffer error."
- Record
EUVD-2011-1299- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w4vm-992c-2c5c No score
Google Chrome before 10.0.648.204 does not properly handle base strings, which allows remote...
Google Chrome before 10.0.648.204 does not properly handle base strings, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "buffer error."
- Record
GHSA-w4vm-992c-2c5c- Weakness
- CWE-120
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-1291 is a high vulnerability (CVSS 7.5) in Google Chrome, published March 25, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.67%, the 76th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2011/0765
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14544
secunia.com/advisories/43859
securityfocus.com/bid/47029
googlechromereleases.blogspot.com/2011/03/stable-channel-update.html
exchange.xforce.ibmcloud.com/vulnerabilities/66298
code.google.com/p/chromium/issues/detail?id=72517
nvd.nist.gov/vuln/detail/CVE-2011-1291
github.com/advisories/GHSA-w4vm-992c-2c5c