PT-2011-4151

CVE-2011-2855

Published

2011-09-16

Updated

2020-05-08

Description by

CVSS 2.0

6.8

Medium

MetricsAV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 14.0.835.163

Description The issue is related to the improper handling of Cascading Style Sheets (CSS) token sequences, which can be exploited by remote attackers to cause a denial of service or possibly have other unspecified impacts. This is achieved via unknown vectors that lead to a "stale node."

Recommendations For versions prior to 14.0.835.163, update to version 14.0.835.163 or later to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Arthur Gerkis

Wushi

Vendors

Affected products

Weakness enumeration

CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\'Injection\')