CVE-2011-3968 - Use After Free

Severity

43%

Complexity

86%

Confidentiality

48%

Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving Cascading Style Sheets (CSS) token sequences.

Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving Cascading Style Sheets (CSS) token sequences.

CVSS 2.0 Base Score 4.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:N/I:N/A:P).

Demo Examples

Use After Free

CWE-416

The following example demonstrates the weakness.


               
}
free(buf3R2);

Use After Free

CWE-416

The following code illustrates a use after free error:


               
}
free(ptr);
logError("operation aborted before commit", ptr);

When an error occurs, the pointer is immediately freed. However, this pointer is later incorrectly used in the logError function.

Overview

Type

Apple

First reported 13 years ago

2012-02-09 04:10:00

Last updated 4 years ago

2020-04-16 17:45:00

Affected Software

Apple iTunes

Apple Safari

References

http://code.google.com/p/chromium/issues/detail?id=109743

Exploit, Vendor Advisory

http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html

Release Notes, Vendor Advisory

APPLE-SA-2012-07-25-1

Mailing List, Third Party Advisory

APPLE-SA-2012-09-12-1

Mailing List, Third Party Advisory

APPLE-SA-2012-09-19-1

Mailing List, Third Party Advisory

http://support.apple.com/kb/HT5400

Third Party Advisory

http://support.apple.com/kb/HT5485

Third Party Advisory

http://support.apple.com/kb/HT5503

Third Party Advisory

oval:org.mitre.oval:def:14483

Third Party Advisory

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.