CVE-2011-1296

ALTO 7.5CVE-2011-1296 · Published 25/03/2011 · updated 16/06/2026

In breve

CVE-2011-1296 è una vulnerabilità ALTO (CVSS 7.5) che riguarda itunes (apple), safari (apple), chrome (google).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.0%, superiore al 81.0% delle vulnerabilità.
Correzione: aggiornare a 10.5, 5.0.6, 10.0.648.204 o successiva.

Package	Affected versions	Patched versions
itunes apple	`< 10.5`	`10.5`
safari apple	`< 5.0.6`	`5.0.6`
chrome google	`< 10.0.648.204`	`10.0.648.204`

Description

Google Chrome before 10.0.648.204 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."

References

code.google.com/p/chromium/issues/detail · Permissions Required
googlechromereleases.blogspot.com/2011/03/stable-channel-update.html · Vendor Advisory
lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html · Mailing List
lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html · Mailing List
lists.apple.com/archives/security-announce/2011//Jul/msg00002.html · Mailing List
secunia.com/advisories/43859 · Third Party Advisory
support.apple.com/kb/HT4808 · Third Party Advisory
support.apple.com/kb/HT4981 · Third Party Advisory
support.apple.com/kb/HT4999 · Third Party Advisory
securityfocus.com/bid/47029 · Third Party Advisory
vupen.com/english/advisories/2011/0765 · Permissions Required

Altre vulnerabilità di itunes

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

itunes

apple

< 10.5

10.5

safari

apple

< 5.0.6

5.0.6

chrome

google

< 10.0.648.204

10.0.648.204

Altre vulnerabilità di itunes

Vedi tutto →