PT-2014-2119 · Google+1 · Google Chrome+1

Inferno · Published 2014-12-26 · Updated 2014-12-29 · CVE-2011-1798

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 11.0.696.65

Description The issue is related to the rendering of SVG text elements in Google Chrome. It occurs when the RenderSVGText.cpp file in WebCore in WebKit does not properly perform a cast of an unspecified variable during an attempt to handle a block child. This can allow remote attackers to cause a denial of service, resulting in an application crash, or possibly have other unknown impacts via a crafted text element in an SVG document.

Recommendations For versions prior to 11.0.696.65, update to version 11.0.696.65 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-1798

Affected Products

Google Chrome

Webkit

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2011-1798 · Security Note
• http://launchpad.net/bugs/778822 · Note
• http://trac.webkit.org/changeset/84085 · Note
• http://crbug.com/79595 · Note