Denial of Service Vulnerability in Google Chrome's SPDY Implementation

Denial of Service Vulnerability in Google Chrome's SPDY Implementation

CVE-2011-1465 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

The SPDY implementation in net/http/http_network_transaction.cc in Google Chrome before 11.0.696.14 drains the bodies from SPDY responses, which might allow remote SPDY servers to cause a denial of service (application exit) by canceling a stream.

Learn more about our Cis Benchmark Audit For Google Chrome.