MEDIUM · 6.8

CVE-2011-2855

Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service or possibly have unspecified other i...

Vulnerability Description

Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale node."

CVSS Score

6.8

MEDIUM

AV:N/AC:M/Au:N/C:P/I:P/A:P
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
GoogleChrome< 14.0.835.163
AppleItunes< 10.6
AppleSafari< 5.1.4
AppleIphone Os< 5.1

Related Weaknesses (CWE)

References

FAQ

What is CVE-2011-2855?

CVE-2011-2855 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service or possibly have unspecified other i...

How severe is CVE-2011-2855?

CVE-2011-2855 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2011-2855?

Check the references section above for vendor advisories and patch information. Affected products include: Google Chrome, Apple Itunes, Apple Safari, Apple Iphone Os.