PT-2011-4756 · Google+1 · Google Chrome+2

Publicado

2011-10-25

·

Atualizado

2020-05-11

·

CVE-2011-3885

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 15.0.874.102
Description The issue is related to a use-after-free vulnerability that allows remote attackers to cause a denial of service or possibly have other unspecified impacts. This is achieved through vectors related to stale Cascading Style Sheets (CSS) token-sequence data. The vulnerability can be exploited by using outdated CSS token-sequence data.
Recommendations For Google Chrome versions prior to 15.0.874.102, update to version 15.0.874.102 or later to resolve the issue. As a temporary workaround, consider restricting the use of Cascading Style Sheets (CSS) until a patch is applied.

Exploit

Correção

DoS

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

CVE-2011-3885

Produtos afetados

Google Chrome
Safari
Itunes