CVE-2011-3015

Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote...

6.8 Medium

CVE-2011-3015 is a medium vulnerability (CVSS 6.8) in Google Chrome, published February 16, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.03%, the 64th percentile. No source names a fixed version.

Severity: 6.8 MediumCVSS 2.0, NVD
Exploit chance: 1.03%EPSS, 64th percentile
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: No fix listedNo source names one

Description

Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Exploit likelihood

1.03%Down 0.2 points since Feb 4, 2022

Affected products

google chrome

Affected packages

Affected packages
Package	Affected	Fixed
`qtwebkit-source` Ubuntu:16.04:LTS	All versions, plus listed versions 2.3.2-0ubuntu102.3.2-0ubuntu11	None known
`chromium` openSUSE:Tumbleweed From an advisory covering 719 CVEs	before 55.0.2883.75-3.1	55.0.2883.75-3.1
`chromium` openSUSE:Tumbleweed From an advisory covering 2310 CVEs	before 113.0.5672.92-1.1	113.0.5672.92-1.1

What each source reports

NVD Score used6.8

Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Record: CVE-2011-3015
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-190
Updated: 2026-11-02

CVE ListNo score

Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Record: CVE-2011-3015
Updated: 2026-11-02

EUVDEUVD-2011-2983No score

Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Record: EUVD-2011-2983
Updated: 2026-11-03

GitHub AdvisoriesGHSA-5cj4-3554-phggNo score

Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote...

Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Record: GHSA-5cj4-3554-phgg
Weakness: CWE-190
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10171-1No score

chromedriver-55.0.2883.75-3.1 on GA media

These are all security issues fixed in the chromedriver-55.0.2883.75-3.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10171-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:12948-1No score

ungoogled-chromium-113.0.5672.92-1.1 on GA media

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:12948-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2011-3015No score

Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Record: UBUNTU-CVE-2011-3015
Updated: 2026-11-02