CVE-2011-1203
Google Chrome before 10.0.648.127 does not properly handle SVG cursors, which allows remote...
CVE-2011-1203 is a high vulnerability (CVSS 7.5) in Google Chrome, published March 10, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.85%, the 79th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 1.85%EPSS, 79th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Google Chrome before 10.0.648.127 does not properly handle SVG cursors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chromium-browserDebian:6.0 From an advisory covering 12 CVEs | before 6.0.472.63~r59945-5+squeeze3, plus listed versions 6.0.472.63~r59945-56.0.472.63~r59945-5+squeeze2 | 6.0.472.63~r59945-5+squeeze3 |
qtwebkit-sourceUbuntu:16.04:LTS | All versions, plus listed versions 2.3.2-0ubuntu102.3.2-0ubuntu11 | None known |
What each source reports
NVD Score used
Google Chrome before 10.0.648.127 does not properly handle SVG cursors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
- Record
CVE-2011-1203- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Google Chrome before 10.0.648.127 does not properly handle SVG cursors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
- Record
CVE-2011-1203- Updated
- 2026-11-02
EUVDEUVD-2011-1211No score
Google Chrome before 10.0.648.127 does not properly handle SVG cursors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
- Record
EUVD-2011-1211- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f59c-p83w-r2vrNo score
Google Chrome before 10.0.648.127 does not properly handle SVG cursors, which allows remote...
Google Chrome before 10.0.648.127 does not properly handle SVG cursors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
- Record
GHSA-f59c-p83w-r2vr- Updated
- 2026-11-02
OSVUBUNTU-CVE-2011-1203No score
Google Chrome before 10.0.648.127 does not properly handle SVG cursors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
- Record
UBUNTU-CVE-2011-1203- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
support.apple.com/kb/HT4981
securityfocus.com/bid/46785
lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14355
googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html
Show 10 moreShow less
code.google.com/p/chromium/issues/detail?id=73746
exchange.xforce.ibmcloud.com/vulnerabilities/65967
vupen.com/english/advisories/2011/0628
nvd.nist.gov/vuln/detail/CVE-2011-1203
github.com/advisories/GHSA-f59c-p83w-r2vr
ubuntu.com/security/CVE-2011-1203
cve.org/CVERecord?id=CVE-2011-1203