CVE-2011-0485 in the critical feed json
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle speech data, which allows remote attackers to exec…
published 2011-01-14 15 y ago modified 2026-06-16 4 mo ago also EUVD-2011-0505
- cvss
- 10.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 3.4%
- EPSS 3.4% chance of exploitation in 30 days, percentile 88%
- public exploits
- 0
- none known
Summary
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle speech data, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "stale pointer."
Patch / fix
- google chrome 8.0.552.237
- google chrome_os 8.0.552.344
Exploit prediction
3.39% chance of exploitation in the next 30 days, higher than 88% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-20 Improper Input Validation
- Technology feeds
References
-
googlechromereleases.blogspot.com
/2011/01/chrome-stable-release.html
vendor-advisory
-
osvdb.org
/70468
vdb-entry, broken-link
-
securityfocus.com
/bid/45788
vdb-entry, third-party-advisory
-
srware.net
/forum/viewtopic.php?f=18&t=2054
third-party-advisory
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14381
vdb-entry, signature, third-party-advisory
-
code.google.com
/p/chromium/issues/detail?id=68666
permissions-required
-
secunia.com
/advisories/42951
third-party-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/64676
vdb-entry, third-party-advisory
Sources
- CVE List CVE-2011-0485
- NVD CVE-2011-0485
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.