CVE

Id
48971  
CVE No.
CVE-2011-1059  
Status
Candidate  
Description
Use-after-free vulnerability in WebCore in WebKit before r77705, as used in Google Chrome before 11.0.672.2 and other products, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors that entice a user to resubmit a form, related to improper handling of provisional items by the HistoryController component, aka rdar problem 8938557.  
Phase
Assigned (20110222)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
531895 48971 CVE-2011-1059 CONFIRM:http://code.google.com/p/chromium/issues/detail?id=70315  View
531896 48971 CVE-2011-1059 CONFIRM:http://googlechromereleases.blogspot.com/2011/02/dev-channel-update_17.html  View
531897 48971 CVE-2011-1059 CONFIRM:http://trac.webkit.org/changeset/77705  View
531898 48971 CVE-2011-1059 CONFIRM:https://bugs.webkit.org/show_bug.cgi?id=52819  View
531899 48971 CVE-2011-1059 BID:46577  View
531900 48971 CVE-2011-1059 URL:http://www.securityfocus.com/bid/46577  View
531901 48971 CVE-2011-1059 OVAL:oval:org.mitre.oval:def:13943  View
531902 48971 CVE-2011-1059 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:13943  View
531903 48971 CVE-2011-1059 XF:webkit-webcore-dos(65714)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34082 JVNDB-2011-004324 qibosoft Qi Bo CMS の member/list.php におけるSQL インジェクションの脆弱性 qibosoft Qi Bo CMS の member/list.php には、SQL インジェクションの脆弱性が存在します。 CVE-2011-1064 48971 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004324.html  View