CVE-2011-3037 in WebkitGTK+

Summary

Google Chrome before 17.0.963.65 does not properly perform casts of unspecified variables during the splitting of anonymous blocks, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.

Once again VulDB remains the best source for vulnerability data.

Reservation

08/09/2011

Disclosure

03/05/2012

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
8192	WebkitGTK+ RenderBlock.cpp splitTablePartsAroundChild denial of service	404	Proof-of-Concept	Official fix	CVE-2011-3037
8191	WebkitGTK+ Block Splitting denial of service	404	Proof-of-Concept	Official fix	CVE-2011-3037
6378	Apple iOS WebKit use after free	416	Not defined	Official fix	CVE-2011-3037
6133	Apple iTunes WebKit use after free	416	Not defined	Official fix	CVE-2011-3037
4698	Google Chrome Anonymous Block Splitting memory corruption	119	Proof-of-Concept	Official fix	CVE-2011-3037

Sources

• MITRE
• NVD
• CVE Details