CVE-2011-1796

High

Published: 26/12/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

A use-after-free vulnerability in the FrameView::calculateScrollbarModesForLayout function in WebKit in Google Chrome before version 11.0.696.65 allows remote attackers to cause application crashes or potentially have unspecified other impacts via crafted JavaScript code that calls the removeChild method during interaction with a FRAME element.

Risk Assessment

Organizations may experience application crashes, leading to service availability interruptions. Additionally, there is a risk of unspecified impacts that could affect data security.

Recommendation

It is recommended to update Google Chrome to version 11.0.696.65 or later to mitigate this vulnerability. Web applications should also be monitored for suspicious JavaScript activity.

Other vulnerabilities in WebKit w Google Chrome

CVE-2011-1795High
An integer underflow in the HTMLFormElement::removeFormElement function in WebKit in Google Chrome before version 11.0.696.65 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document containing a FORM element.

Original NVD description (English source)

Use-after-free vulnerability in the FrameView::calculateScrollbarModesForLayout function in page/FrameView.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that calls the removeChild method during interaction with a FRAME element.