CVE-2011-1804

Google Chrome < 11.0.696.71 - Use-After-Free in Float Rendering

Title source: llm
STIX 2.1

Description

rendering/RenderBox.cpp in WebCore in WebKit before r86862, as used in Google Chrome before 11.0.696.71, does not properly render floats, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."

References (6)

Core 6
Core References
Various Sources x_refsource_confirm
http://trac.webkit.org/changeset/86862
Release Notes, Vendor Advisory x_refsource_confirm
http://googlechromereleases.blogspot.com/2011/05/stable-channel-update_24.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13992
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/47965
Patch x_refsource_confirm
http://codereview.chromium.org/7050016

Scores

EPSS 0.0149
EPSS Percentile 71.1%

Details

CWE
CWE-20
Status published
Products (1)
google/chrome < 11.0.696.71
Published May 26, 2011
Tracked Since Feb 18, 2026