PT-2011-3298 · Google+1 · Google Chrome+1

Published 2011-04-15 · Updated 2020-06-03 · CVE-2011-1691

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions WebKit before r82222 Google Chrome before 11.0.696.43

Description The issue arises from the counterToCSSValue function in the CSS implementation in WebKit, which does not properly handle access to the counterIncrement and counterReset attributes of CSSStyleDeclaration data. This can be exploited by remote attackers using crafted JavaScript code, leading to a denial of service through a NULL pointer dereference and application crash.

Recommendations For WebKit before r82222, update to version r82222 or later to resolve the issue. For Google Chrome before 11.0.696.43, update to version 11.0.696.43 or later to resolve the issue.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2011-1691

Affected Products

Google Chrome

Webkit

References · 10

• 🔥 https://bugs.webkit.org/show_bug.cgi?id=57266 · Exploit
• 🔥 http://code.google.com/p/chromium/issues/detail?id=77665 · Exploit
• https://cve.org/CVERecord?id=CVE-2011-1691 · Security Note
• https://ubuntu.com/security/CVE-2011-1691 · Vendor Advisory
• http://googlechromereleases.blogspot.com/2011/04/beta-channel-update_12.html · Vendor Advisory
• http://trac.webkit.org/changeset/82222 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2011-1691 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1691 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66818 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14365 · Note