PT-2011-2874 · Google+1 · Google Chrome+1

Sergey Glazunov · Published 2011-03-01 · Updated 2020-06-03 · CVE-2011-1109

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 9.0.597.107

Description The issue is related to the improper processing of nodes in Cascading Style Sheets (CSS) stylesheets, which can be exploited by remote attackers to cause a denial of service or possibly have other unspecified impacts via unknown vectors. This is due to a "stale pointer" issue.

Recommendations For versions prior to 9.0.597.107, update to version 9.0.597.107 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-1109

DSA-2189-1

Affected Products

Google Chrome

Safari

References · 13

• http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1109 · Security Note
• http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_28.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html · Vendor Advisory
• http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html · Vendor Advisory
• http://code.google.com/p/chromium/issues/detail?id=68263 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65727 · Note
• http://xforce.iss.net/xforce/xfdb/65727 · Note
• http://securityfocus.com/bid/46614 · Note
• http://support.apple.com/kb/HT4808 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14422 · Note
• http://support.apple.com/kb/HT4981 · Note
• http://support.apple.com/kb/HT4999 · Note