Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform DOM node removal, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale rendering node."
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Link | Tags |
---|---|
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14131 | vdb entry third party advisory signature |
http://osvdb.org/70467 | vdb entry broken link |
http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html | vendor advisory |
http://www.securityfocus.com/bid/45788 | vdb entry third party advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/64675 | vdb entry third party advisory |
http://www.srware.net/forum/viewtopic.php?f=18&t=2054 | third party advisory |
http://code.google.com/p/chromium/issues/detail?id=68439 | exploit vendor advisory |
http://secunia.com/advisories/42951 | third party advisory |