CVE-2011-1796

Use-after-free vulnerability in the FrameView::calculateScrollbarModesForLayout function in page/FrameView.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that calls the removeChild method during interaction with a FRAME element.
Configurations

Configuration 1 (hide)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

History

07 Nov 2023, 02:07

Type Values Removed Values Added
References (CONFIRM) http://crbug.com/79055 - Vendor Advisory () http://crbug.com/79055 -
References (CONFIRM) http://trac.webkit.org/changeset/84300 - () http://trac.webkit.org/changeset/84300 -
References (CONFIRM) http://launchpad.net/bugs/778822 - () http://launchpad.net/bugs/778822 -

Information

Published : 2014-12-26 02:59

Updated : 2023-11-07 02:07


NVD link : CVE-2011-1796

Mitre link : CVE-2011-1796


JSON object : View

Products Affected

google

  • chrome