Vulnerability Description
The counterToCSSValue function in CSSComputedStyleDeclaration.cpp in the Cascading Style Sheets (CSS) implementation in WebCore in WebKit before r82222, as used in Google Chrome before 11.0.696.43 and other products, does not properly handle access to the (1) counterIncrement and (2) counterReset attributes of CSSStyleDeclaration data provided by a getComputedStyle method call, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Chrome | < 11.0.696.43 |
Related Weaknesses (CWE)
References
- http://code.google.com/p/chromium/issues/detail?id=77665ExploitIssue TrackingPatch
- http://googlechromereleases.blogspot.com/2011/04/beta-channel-update_12.htmlVendor Advisory
- http://trac.webkit.org/changeset/82222Patch
- https://bugs.webkit.org/show_bug.cgi?id=57266ExploitIssue TrackingPatch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66818Third Party AdvisoryVDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Third Party Advisory
- http://code.google.com/p/chromium/issues/detail?id=77665ExploitIssue TrackingPatch
- http://googlechromereleases.blogspot.com/2011/04/beta-channel-update_12.htmlVendor Advisory
- http://trac.webkit.org/changeset/82222Patch
- https://bugs.webkit.org/show_bug.cgi?id=57266ExploitIssue TrackingPatch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66818Third Party AdvisoryVDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Third Party Advisory
FAQ
What is CVE-2011-1691?
CVE-2011-1691 is a vulnerability with a CVSS score of 5.0 (MEDIUM). The counterToCSSValue function in CSSComputedStyleDeclaration.cpp in the Cascading Style Sheets (CSS) implementation in WebCore in WebKit before r82222, as used in Google Chrome before 11.0.696.43 and...
How severe is CVE-2011-1691?
CVE-2011-1691 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-1691?
Check the references section above for vendor advisories and patch information. Affected products include: Google Chrome.