Vulnerability Details : CVE-2011-1204
Google Chrome before 10.0.648.127 does not properly handle attributes, which allows remote attackers to cause a denial of service (DOM tree corruption) or possibly have unspecified other impact via a crafted document.
Vulnerability category: Input validationDenial of service
Products affected by CVE-2011-1204
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2011-1204
3.71%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 92 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2011-1204
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
6.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
8.6
|
6.4
|
NIST |
CWE ids for CVE-2011-1204
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2011-1204
-
http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
Apple - Lists.apple.comMailing List;Third Party Advisory
-
http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html
Chrome Releases: Chrome Stable ReleaseVendor Advisory
-
http://support.apple.com/kb/HT4981
About the security content of iTunes 10.5 - Apple SupportThird Party Advisory
-
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html
Apple - Lists.apple.comMailing List;Third Party Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/65968
Google Chrome DOM tree code execution CVE-2011-1204 Vulnerability ReportThird Party Advisory;VDB Entry
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13585
Repository / Oval RepositoryThird Party Advisory
-
http://support.apple.com/kb/HT4808
About the security content of Safari 5.1 and Safari 5.0.6 - Apple SupportThird Party Advisory
-
http://www.vupen.com/english/advisories/2011/0628
Webmail | OVH- OVHPermissions Required
-
http://code.google.com/p/chromium/issues/detail?id=74030
Inloggen - Google AccountsPermissions Required
-
http://www.securityfocus.com/bid/46785
Google Chrome prior to 10.0.648.127 Multiple Security VulnerabilitiesThird Party Advisory;VDB Entry
-
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html
Apple - Lists.apple.comMailing List;Third Party Advisory
-
http://support.apple.com/kb/HT4999
About the security content of iOS 5 Software Update - Apple SupportThird Party Advisory
Jump to