PT-2014-2119 · Google+1 · Google Chrome+1

Inferno · Publicado 2014-12-26 · Atualizado 2014-12-29 · CVE-2011-1798

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 11.0.696.65

Description The issue is related to the rendering of SVG text elements in Google Chrome. It occurs when the RenderSVGText.cpp file in WebCore in WebKit does not properly perform a cast of an unspecified variable during an attempt to handle a block child. This can allow remote attackers to cause a denial of service, resulting in an application crash, or possibly have other unknown impacts via a crafted text element in an SVG document.

Recommendations For versions prior to 11.0.696.65, update to version 11.0.696.65 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2011-1798

Produtos afetados

Google Chrome

Webkit

Referências · 4

• http://launchpad.net/bugs/778822 · Nota
• http://trac.webkit.org/changeset/84085 · Nota
• http://crbug.com/79595 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-1798 · Nota de Segurança