Description
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with CANVAS elements, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
Metrics
CVSS 2.0 10.0/10
AV:N/AC:L/Au:N/C:C/I:C/A:CAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://code.google.com/p/chromium/issues/detail?id=66560Permissions Required
- http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.htmlVendor Advisory
- http://osvdb.org/70456Broken Link
- http://secunia.com/advisories/42951Third Party Advisory
- http://www.securityfocus.com/bid/45788Third Party Advisory, VDB Entry
- http://www.srware.net/forum/viewtopic.php?f=18&t=2054Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64664Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14460Third Party Advisory
- http://code.google.com/p/chromium/issues/detail?id=66560Permissions Required
- http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.htmlVendor Advisory
- http://osvdb.org/70456Broken Link
- http://secunia.com/advisories/42951Third Party Advisory
- http://www.securityfocus.com/bid/45788Third Party Advisory, VDB Entry
- http://www.srware.net/forum/viewtopic.php?f=18&t=2054Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64664Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14460Third Party Advisory
Timeline
- Published
- Jan 14, 2011
- Last modified
- Jun 16, 2026
- NVD status
- Modified