CVE-2011-2359: Input Validation
Google Chrome before 13.0.782.107 does not properly track line boxes during rendering, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2359?
CVE-2011-2359 has a severity rating of medium as it can lead to denial of service.
How do I fix CVE-2011-2359?
To fix CVE-2011-2359, upgrade Google Chrome to version 13.0.782.107 or later.
What versions of software are affected by CVE-2011-2359?
CVE-2011-2359 affects Google Chrome versions prior to 13.0.782.107, as well as several versions of Apple iTunes, Safari, and older Debian systems.
What type of attack does CVE-2011-2359 enable?
CVE-2011-2359 can be exploited to cause a denial of service through the use of stale pointers during rendering.
Is there any known exploit for CVE-2011-2359?
There are no specific known exploits publicly disclosed for CVE-2011-2359, but it poses a risk due to the potential for unhandled exceptions.