CVE-2011-3071
Webkit HTMLMedia Element beforeLoad Remote Code Execution Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
Use-after-free vulnerability in the HTMLMediaElement implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Una vulnerabilidad de uso después de liberación en la implementación de HTMLMediaElement en Google Chrome antes de v18.0.1025.151 permite a atacantes remotos causar una denegación de servicio o posiblemente tener un impacto no especificado
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the library's implementation of a HTMLMedia element. After a source element is created, an attacker can catch the beforeLoad event before the element is used, and delete the element. The pointer to the source element will then be referenced causing a use-after-free condition, which can lead to code execution under the context of the application.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2011-08-09 CVE Reserved
- 2012-04-05 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- 2024-08-06 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-416: Use After Free
CAPEC
References (16)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/81041 | Broken Link | |
| http://secunia.com/advisories/48732 | Third Party Advisory | |
| http://secunia.com/advisories/48749 | Third Party Advisory | |
| http://support.apple.com/kb/HT5400 | Third Party Advisory |
|
| http://support.apple.com/kb/HT5485 | Third Party Advisory |
|
| http://support.apple.com/kb/HT5503 | Third Party Advisory |
|
| http://www.securityfocus.com/bid/52913 | Third Party Advisory | |
| http://www.securitytracker.com/id?1026892 | Third Party Advisory | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/74631 | Third Party Advisory | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15317 | Signature |
| URL | Date | SRC |
|---|---|---|
| http://code.google.com/p/chromium/issues/detail?id=118273 | 2024-08-06 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | < 18.0.1025.151 Search vendor "Google" for product "Chrome" and version " < 18.0.1025.151" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Itunes Search vendor "Apple" for product "Itunes" | < 10.7 Search vendor "Apple" for product "Itunes" and version " < 10.7" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Safari Search vendor "Apple" for product "Safari" | < 6.0 Search vendor "Apple" for product "Safari" and version " < 6.0" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Iphone Os Search vendor "Apple" for product "Iphone Os" | < 6.0 Search vendor "Apple" for product "Iphone Os" and version " < 6.0" | - |
Affected
| ||||||