CVE-2011-0478 Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle SVG use elements, which allows remote attackers to cause a denial of service or possibly have unspecified other...
HighCVSS 10.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle SVG use elements, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google chrome os | < 8.0.552.344 | 8.0.552.344 |
| Google Chrome | < 8.0.552.237 | 8.0.552.237 |
References
- code.google.com exploit issue-tracking vendor-advisory
- googlechromereleases.blogspot.com vendor-advisory
- 70461 broken-link vdb-entry
- 42951 third-party-advisory
- 45788 third-party-advisory vdb-entry
- www.srware.net third-party-advisory
- chrome-use-code-execution(64669) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:14191 signature third-party-advisory vdb-entry