CVE-2011-1691 — NULL Pointer Dereference in Google Chrome

CWE-476 — NULL Pointer Dereference3 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
2.1%
top 16.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Chrome
Timeline
PublishedApr 15
Latest updateMay 13

Description

The counterToCSSValue function in CSSComputedStyleDeclaration.cpp in the Cascading Style Sheets (CSS) implementation in WebCore in WebKit before r82222, as used in Google Chrome before 11.0.696.43 and other products, does not properly handle access to the (1) counterIncrement and (2) counterReset attributes of CSSStyleDeclaration data provided by a getComputedStyle method call, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted…

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDgoogle/chrome< 11.0.696.43

Patches

Patch: code.google.com ↗Patch: trac.webkit.org ↗Patch: bugs.webkit.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-62f8-j3hg-8hcg: The counterToCSSValue function in CSSComputedStyleDeclaration↗2022-05-13
▶
OSV
CVE-2011-1691: The counterToCSSValue function in CSSComputedStyleDeclaration↗2011-04-15
▶
CVE-2011-1691 — NULL Pointer Dereference in Google | cvebase