Description
Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale node."
References
- 75557 vdb-entry
- http://code.google.com/p/chromium/issues/detail?id=92959
- chrome-stylesheet-code-execution(69882) vdb-entry
- oval:org.mitre.oval:def:14485 vdb-entry signature
- 1026774 vdb-entry
- 48377 third-party-advisory
- http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html
- APPLE-SA-2012-03-12-1 vendor-advisory
- 48274 third-party-advisory
- APPLE-SA-2012-03-07-1 vendor-advisory
- 48288 third-party-advisory
- APPLE-SA-2012-03-07-2 vendor-advisory