CVE-2011-1795

High

Published: 26/12/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

An integer underflow in the HTMLFormElement::removeFormElement function in WebKit in Google Chrome before version 11.0.696.65 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document containing a FORM element.

Risk Assessment

This vulnerability may lead to application crashes, affecting service availability. There is also a risk that attackers could exploit this flaw for further attacks.

Recommendation

It is recommended to update Google Chrome to version 11.0.696.65 or later to mitigate this vulnerability.

Other vulnerabilities in WebKit w Google Chrome

CVE-2011-1796High
A use-after-free vulnerability in the FrameView::calculateScrollbarModesForLayout function in WebKit in Google Chrome before version 11.0.696.65 allows remote attackers to cause application crashes or potentially have unspecified other impacts via crafted JavaScript code that calls the removeChild method during interaction with a FRAME element.

Original NVD description (English source)

Integer underflow in the HTMLFormElement::removeFormElement function in html/HTMLFormElement.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document containing a FORM element.