CVE-2011-1794

Integer overflow in the FilterEffect::copyImageBytes function in platform/graphics/filters/FilterEffect.cpp in the SVG filter implementation in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted dimensions.
Configurations

Configuration 1 (hide)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

History

07 Nov 2023, 02:07

Type Values Removed Values Added
References (CONFIRM) http://trac.webkit.org/changeset/84422 - () http://trac.webkit.org/changeset/84422 -
References (CONFIRM) http://crbug.com/78327 - Vendor Advisory () http://crbug.com/78327 -
References (CONFIRM) http://launchpad.net/bugs/778822 - () http://launchpad.net/bugs/778822 -

Information

Published : 2014-12-26 02:59

Updated : 2023-11-07 02:07


NVD link : CVE-2011-1794

Mitre link : CVE-2011-1794


JSON object : View

Products Affected

google

  • chrome
CWE
CWE-189

Numeric Errors