Integer overflow in the FilterEffect::copyImageBytes function in platform/graphics/filters/FilterEffect.cpp in the SVG filter implementation in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted dimensions.
References
Configurations
History
21 Nov 2024, 01:27
Type | Values Removed | Values Added |
---|---|---|
References | () http://crbug.com/78327 - | |
References | () http://launchpad.net/bugs/778822 - | |
References | () http://trac.webkit.org/changeset/84422 - |
07 Nov 2023, 02:07
Type | Values Removed | Values Added |
---|---|---|
References | () http://crbug.com/78327 - | |
References | () http://trac.webkit.org/changeset/84422 - | |
References | () http://launchpad.net/bugs/778822 - |
Information
Published : 2014-12-26 02:59
Updated : 2024-11-21 01:27
NVD link : CVE-2011-1794
Mitre link : CVE-2011-1794
CVE.ORG link : CVE-2011-1794
JSON object : View
Products Affected
- chrome
CWE
CWE-189
Numeric Errors