Description
Google Chrome before 11.0.696.57 does not properly handle DOM id maps, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "dangling pointers."
References
- http://support.apple.com/kb/HT4981
- google-chrome-domid-dos(67158) vdb-entry
- APPLE-SA-2011-10-12-1 vendor-advisory
- http://code.google.com/p/chromium/issues/detail?id=77463
- APPLE-SA-2011-10-11-1 vendor-advisory
- http://googlechromereleases.blogspot.com/2011/04/chrome-stable-update.html
- http://support.apple.com/kb/HT4999
- http://support.apple.com/kb/HT4808
- APPLE-SA-2011-07-20-1 vendor-advisory
- oval:org.mitre.oval:def:14279 vdb-entry signature