PT-2011-3298 · Google+1 · Google Chrome+1

Publicado 2011-04-15 · Atualizado 2020-06-03 · CVE-2011-1691

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions WebKit before r82222 Google Chrome before 11.0.696.43

Description The issue arises from the counterToCSSValue function in the CSS implementation in WebKit, which does not properly handle access to the counterIncrement and counterReset attributes of CSSStyleDeclaration data. This can be exploited by remote attackers using crafted JavaScript code, leading to a denial of service through a NULL pointer dereference and application crash.

Recommendations For WebKit before r82222, update to version r82222 or later to resolve the issue. For Google Chrome before 11.0.696.43, update to version 11.0.696.43 or later to resolve the issue.

Exploit

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CVE-2011-1691

Produtos afetados

Google Chrome

Webkit

Referências · 10

• 🔥 https://bugs.webkit.org/show_bug.cgi?id=57266 · Exploit
• 🔥 http://code.google.com/p/chromium/issues/detail?id=77665 · Exploit
• https://cve.org/CVERecord?id=CVE-2011-1691 · Nota de Segurança
• https://ubuntu.com/security/CVE-2011-1691 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66818 · Nota
• http://googlechromereleases.blogspot.com/2011/04/beta-channel-update_12.html · Aviso do Fabricante
• http://trac.webkit.org/changeset/82222 · Correção
• https://osv.dev/vulnerability/UBUNTU-CVE-2011-1691 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14365 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-1691 · Nota de Segurança