CVE-2011-3019: Heap-based buffer overflow in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of...

Security readout for executives and security teams

This old Chrome flaw could let a malicious MKV video crash the browser, with sources leaving room for unspecified additional impact. It matters mainly where legacy Chrome versions before 17.0.963.56 still exist, such as unmanaged endpoints, kiosks, lab systems, or embedded desktop images. Exposure is limited to systems running Google Chrome versions before 17.0.963.56. Most current managed environments should be unaffected if browser updates are enforced, but stale images and unmanaged endpoints should be checked. Treat this as a legacy-browser cleanup issue with elevated concern if old Chrome remains in production. No active exploitation is evidenced here, but remote browser memory corruption is not a class to leave unresolved. Mitigation focus: Update Chrome to 17.0.963.56 or a currently supported version.; Remove unsupported Chrome versions from managed endpoint baselines.; Check Google release guidance for any related vendor notes..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.