CVE-2011-1691 in Chromeinformazioni

Riassunto

di MITRE

The counterToCSSValue function in CSSComputedStyleDeclaration.cpp in the Cascading Style Sheets (CSS) implementation in WebCore in WebKit before r82222, as used in Google Chrome before 11.0.696.43 and other products, does not properly handle access to the (1) counterIncrement and (2) counterReset attributes of CSSStyleDeclaration data provided by a getComputedStyle method call, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Prenotare

14/04/2011

Divulgazione

14/04/2011

Moderazione

accettato

CPE

pronto

EPSS

0.01582

KEV

no

Attività

molto basso

Fonti

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!