CVEvulnerability
CVE-2011-1691
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-04-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-476
Description
The counterToCSSValue function in CSSComputedStyleDeclaration.cpp in the Cascading Style Sheets (CSS) implementation in WebCore in WebKit before r82222, as used in Google Chrome before 11.0.696.43 and other products, does not properly handle access to the (1) counterIncrement and (2) counterReset attributes of CSSStyleDeclaration data provided by a getComputedStyle method call, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code.
Affected configurations
• google chrome (< 11.0.696.43)
Related
Weakness · CWE (1)
- CWE-476 NULL Pointer Dereference weakness
References
- http://code.google.com/p/chromium/issues/detail?id=77665 Exploit, Issue Tracking, Patch, Vendor Advisory
- http://googlechromereleases.blogspot.com/2011/04/beta-channel-update_12.html Vendor Advisory
- http://trac.webkit.org/changeset/82222 Patch
- https://bugs.webkit.org/show_bug.cgi?id=57266 Exploit, Issue Tracking, Patch, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66818 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14365 Third Party Advisory
- http://code.google.com/p/chromium/issues/detail?id=77665 Exploit, Issue Tracking, Patch, Vendor Advisory
- http://googlechromereleases.blogspot.com/2011/04/beta-channel-update_12.html Vendor Advisory
- http://trac.webkit.org/changeset/82222 Patch
- https://bugs.webkit.org/show_bug.cgi?id=57266 Exploit, Issue Tracking, Patch, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66818 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14365 Third Party Advisory