Threat Investigation
Request a demo

CVE-2011-1691

Medium

Description

The counterToCSSValue function in CSSComputedStyleDeclaration.cpp in the Cascading Style Sheets (CSS) implementation in WebCore in WebKit before r82222, as used in Google Chrome before 11.0.696.43 and other products, does not properly handle access to the (1) counterIncrement and (2) counterReset attributes of CSSStyleDeclaration data provided by a getComputedStyle method call, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code.

SeverityMedium
CVSS5.0
Exploit probability—
ProductGoogle Chrome
PublishedApr 15, 2011
First seenApr 15, 2011

How to fix

Update
  • google chrome11.0.696.43 or later

Affected products

ProductAffected versionsFixed in
google chromev < 11.0.696.4311.0.696.43

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.