CVE-2011-1465

The SPDY implementation in net/http/http_network_transaction.cc in Google Chrome before 11.0.696.14 drains the bodies from SPDY responses, which might allow remote SPDY servers to cause a denial of service (application exit) by canceling a stream.

• http://code.google.com/p/chromium/issues/detail?id=75657Issue Tracking, Patch, Vendor Advisory
• http://googlechromereleases.blogspot.com/2011/03/dev-channel-update_17.htmlVendor Advisory
• http://src.chromium.org/viewvc/chrome/trunk/src/net/http/http_network_transaction.cc?r1=77893&r2=77892&pathrev=77893Patch, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66195VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14564Third Party Advisory
• http://code.google.com/p/chromium/issues/detail?id=75657Issue Tracking, Patch, Vendor Advisory
• http://googlechromereleases.blogspot.com/2011/03/dev-channel-update_17.htmlVendor Advisory
• http://src.chromium.org/viewvc/chrome/trunk/src/net/http/http_network_transaction.cc?r1=77893&r2=77892&pathrev=77893Patch, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66195VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14564Third Party Advisory

Published

Mar 20, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-1456Google Chrome before 11.0.696.57 does not properly handle PD…
• CVE-2011-1457WebKit, as used in Apple Safari before 5.0.6, allows remote …
• CVE-2011-1459The WebKit::WebPluginContainerImpl::handleEvent function in …6.5
• CVE-2011-1460WebKit in Google Chrome before Blink M11 contains a bad cast…9.8
• CVE-2011-1462WebKit, as used in Apple Safari before 5.0.6, allows remote …
• CVE-2011-1464Buffer overflow in the strval function in PHP before 5.3.6, …
• CVE-2011-1466Integer overflow in the SdnToJulian function in the Calendar…
• CVE-2011-1467Unspecified vulnerability in the NumberFormatter::setSymbol …
• CVE-2011-1468Multiple memory leaks in the OpenSSL extension in PHP before…
• CVE-2011-1469Unspecified vulnerability in the Streams component in PHP be…
• CVE-2011-1470The Zip extension in PHP before 5.3.6 allows context-depende…
• CVE-2011-1471Integer signedness error in zip_stream.c in the Zip extensio…