CVE-2011-3061

N/A Unknown

Published: March 30, 2012 Modified: April 29, 2026

Description

Google Chrome before 18.0.1025.142 does not properly check X.509 certificates before use of a SPDY proxy, which might allow man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://code.google.com/p/chromium/issues/detail?id=116398

Source: cve@mitre.org

Vendor Advisory

http://googlechromereleases.blogspot.com/2012/03/stable-channel-release-and-beta-channel.html

Source: cve@mitre.org

Exploit Vendor Advisory

http://osvdb.org/80739

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/48618

Source: cve@mitre.org

Not Applicable

http://secunia.com/advisories/48691

Source: cve@mitre.org

Not Applicable

http://secunia.com/advisories/48763

Source: cve@mitre.org

Not Applicable

http://www.securityfocus.com/bid/52762

Source: cve@mitre.org

Third Party Advisory VDB Entry

http://www.securitytracker.com/id?1026877

Source: cve@mitre.org

Third Party Advisory VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/74411

Source: cve@mitre.org

Third Party Advisory VDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14849

Source: cve@mitre.org

Third Party Advisory

http://code.google.com/p/chromium/issues/detail?id=116398