CVE-2011-3928
Webkit.org Webkit copyNonAttributeProperties Remote Code Execution Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM handling.
Una vulnerabilidad de uso después de liberación en Google Chrome antes de v16.0.912.77 permite a atacantes remotos causar una denegación de servicio o posiblemente tener un impacto no especificado a través de vectores relacionados con la manipulación de DOM.
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of WebKit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The flaw exists within the WebCore component as used by WebKit. Specifically within the handling of element properties. When importing a node having a nonattribute property such as an attached event, an object is improperly freed and accessed. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the browser.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2011-10-01 CVE Reserved
- 2012-01-24 CVE Published
- 2024-08-06 CVE Updated
- 2024-12-22 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-416: Use After Free
CAPEC
References (11)
| URL | Tag | Source |
|---|---|---|
| http://code.google.com/p/chromium/issues/detail?id=108461 | X_refsource_confirm | |
| http://googlechromereleases.blogspot.com/2012/01/stable-channel-update_23.html | X_refsource_confirm | |
| http://secunia.com/advisories/47694 | Third Party Advisory | |
| http://secunia.com/advisories/48288 | Third Party Advisory | |
| http://secunia.com/advisories/48377 | Third Party Advisory | |
| http://www.securitytracker.com/id?1026569 | Vdb Entry | |
| http://www.securitytracker.com/id?1026774 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/73809 | Vdb Entry | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14441 | Signature |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html | 2023-11-07 | |
| http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html | 2023-11-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | < 16.0.912.77 Search vendor "Google" for product "Chrome" and version " < 16.0.912.77" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Safari Search vendor "Apple" for product "Safari" | < 5.1.4 Search vendor "Apple" for product "Safari" and version " < 5.1.4" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Iphone Os Search vendor "Apple" for product "Iphone Os" | < 5.1 Search vendor "Apple" for product "Iphone Os" and version " < 5.1" | - |
Affected
| ||||||