CVE

Id
49207  
CVE No.
CVE-2011-1295  
Status
Candidate  
Description
WebKit, as used in Google Chrome before 10.0.648.204 and Apple Safari before 5.0.6, does not properly handle node parentage, which allows remote attackers to cause a denial of service (DOM tree corruption), conduct cross-site scripting (XSS) attacks, or possibly have unspecified other impact via unknown vectors.  
Phase
Assigned (20110306)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
534872 49207 CVE-2011-1295 CONFIRM:http://code.google.com/p/chromium/issues/detail?id=74991  View
534873 49207 CVE-2011-1295 CONFIRM:http://googlechromereleases.blogspot.com/2011/03/stable-channel-update.html  View
534874 49207 CVE-2011-1295 CONFIRM:http://support.apple.com/kb/HT4808  View
534875 49207 CVE-2011-1295 CONFIRM:http://support.apple.com/kb/HT4999  View
534876 49207 CVE-2011-1295 APPLE:APPLE-SA-2011-07-20-1  View
534877 49207 CVE-2011-1295 URL:http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html  View
534878 49207 CVE-2011-1295 APPLE:APPLE-SA-2011-10-12-1  View
534879 49207 CVE-2011-1295 URL:http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html  View
534880 49207 CVE-2011-1295 BID:47029  View
534881 49207 CVE-2011-1295 URL:http://www.securityfocus.com/bid/47029  View
534882 49207 CVE-2011-1295 OVAL:oval:org.mitre.oval:def:14269  View
534883 49207 CVE-2011-1295 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14269  View
534884 49207 CVE-2011-1295 SECUNIA:43859  View
534885 49207 CVE-2011-1295 URL:http://secunia.com/advisories/43859  View
534886 49207 CVE-2011-1295 VUPEN:ADV-2011-0765  View
534887 49207 CVE-2011-1295 URL:http://www.vupen.com/english/advisories/2011/0765  View
534888 49207 CVE-2011-1295 XF:google-chrome-node-code-exec(66302)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31435 JVNDB-2011-001675 Windows 上で稼働する Mozilla Firefox、および Google Chrome における任意のコードを実行される脆弱性 Windows 上で稼働する Mozilla Firefox、および Google Chrome の GPU プロセスで利用される、Almost Native Graphics Layer Engine (ANGLE) の WebGLES ライブラリ内にある Program::getActiveUniformMaxLength 関数には、任意のコードを実行される脆弱性が存在します。 CVE-2011-1300 49207 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001675.html  View