CVE-2011-3060

Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote...

6.8 Medium

CVE-2011-3060 is a medium vulnerability (CVSS 6.8) in Google Chrome, published March 30, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.25%, the 83rd percentile. No source names a fixed version.

What does this mean?

Severity: 6.8 MediumCVSS 2.0, NVD
Exploit chance: 2.25%EPSS, 83rd percentile
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: No fix listedNo source names one

Description

Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Exploit likelihood

2.25%Down 1.2 points since Feb 4, 2022

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`chromium` openSUSE:Tumbleweed From an advisory covering 719 CVEs	before 55.0.2883.75-3.1	55.0.2883.75-3.1
`chromium` openSUSE:Tumbleweed From an advisory covering 2310 CVEs	before 113.0.5672.92-1.1	113.0.5672.92-1.1

What each source reports

NVD Score used6.8

Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Record: CVE-2011-3060
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-125
Updated: 2026-11-02

CVE ListNo score

Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Record: CVE-2011-3060
Updated: 2026-11-02

EUVDEUVD-2011-3028No score

Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Record: EUVD-2011-3028
Updated: 2026-11-03

GitHub AdvisoriesGHSA-7wmw-86ww-mv98No score

Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote...

Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Record: GHSA-7wmw-86ww-mv98
Weakness: CWE-125
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10171-1No score

chromedriver-55.0.2883.75-3.1 on GA media

These are all security issues fixed in the chromedriver-55.0.2883.75-3.1 package on the GA media of openSUSE Tumbleweed.