NVD

Id
8251  
Name
CVE-2011-1290  
Description
Integer overflow in WebKit, as used on the Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246, in Google Chrome before 10.0.648.133, and in Apple Safari before 5.0.5, allows remote attackers to execute arbitrary code via unknown vectors related to CSS "style handling," nodesets, and a length value, as demonstrated by Vincenzo Iozzo, Willem Pinckaers, and Ralf-Philipp Weinmann during a Pwn2Own competition at CanSecWest 2011.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-03-11  
Modified Date
2011-10-11  
Seq
2011-1290  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
47384 8251 CVE-2011-1290 http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011  View
47385 8251 CVE-2011-1290 http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates.html  View
47386 8251 CVE-2011-1290 APPLE-SA-2011-04-14-1  View
47387 8251 CVE-2011-1290 APPLE-SA-2011-04-14-2  View
47388 8251 CVE-2011-1290 APPLE-SA-2011-04-14-3  View
47389 8251 CVE-2011-1290 http://support.apple.com/kb/HT4596  View
47390 8251 CVE-2011-1290 http://support.apple.com/kb/HT4607  View
47391 8251 CVE-2011-1290 http://www.blackberry.com/btsc/KB26132  View
47392 8251 CVE-2011-1290 DSA-2192  View
47393 8251 CVE-2011-1290 20110414 ZDI-11-104: (Pwn2Own) Webkit CSS Text Element Count Remote Code Execution Vulnerability  View
47394 8251 CVE-2011-1290 46849  View
47395 8251 CVE-2011-1290 1025212  View
47396 8251 CVE-2011-1290 ADV-2011-0645  View
47397 8251 CVE-2011-1290 ADV-2011-0654  View
47398 8251 CVE-2011-1290 ADV-2011-0671  View
47399 8251 CVE-2011-1290 ADV-2011-0984  View
47400 8251 CVE-2011-1290 http://www.zdnet.com/blog/security/pwn2own-2011-blackberry-falls-to-webkit-browser-attack/8401  View
47401 8251 CVE-2011-1290 http://www.zerodayinitiative.com/advisories/ZDI-11-104  View
47402 8251 CVE-2011-1290 google-webkit-style-code-execution(66052)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31290 JVNDB-2011-001530 WebKit における任意のコードを実行される脆弱性 WebKit には、CSS のスタイル、ノードセット、および長さ値の処理に関して不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2011-1290 49197 CVE-2011-1290 8251 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001530.html 2011-03-11 2011-05-10 View