CVEvulnerability
CVE-2011-3909
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-12-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-119
Description
The Cascading Style Sheets (CSS) implementation in Google Chrome before 16.0.912.63 on 64-bit platforms does not properly manage property arrays, which allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors.
Affected configurations
• google chrome (< 16.0.912.63)
• apple itunes (< 10.6)
• apple safari (< 5.1.4)
• apple iphone os (< 5.1)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://code.google.com/p/chromium/issues/detail?id=101010 code.google.com
- http://googlechromereleases.blogspot.com/2011/12/stable-channel-update.html googlechromereleases.blogspot.com
- http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html lists.apple.com
- http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html lists.apple.com
- http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html lists.apple.com
- http://secunia.com/advisories/48274 secunia.com
- http://secunia.com/advisories/48288 secunia.com
- http://secunia.com/advisories/48377 secunia.com
- http://www.securitytracker.com/id?1026774 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73808 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14579 oval.cisecurity.org
- http://code.google.com/p/chromium/issues/detail?id=101010 code.google.com
- http://googlechromereleases.blogspot.com/2011/12/stable-channel-update.html googlechromereleases.blogspot.com
- http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html lists.apple.com
- http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html lists.apple.com
- http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html lists.apple.com
- http://secunia.com/advisories/48274 secunia.com
- http://secunia.com/advisories/48288 secunia.com
- http://secunia.com/advisories/48377 secunia.com
- http://www.securitytracker.com/id?1026774 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73808 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14579 oval.cisecurity.org