CVE-2011-1798

High

Published: 26/12/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

In WebKit in Google Chrome before version 11.0.696.65, there is a bug in RenderSVGText.cpp that improperly casts a variable when handling a block child. This can lead to application crashes or other unknown impacts via a crafted text element in an SVG document.

Risk Assessment

Remote attackers may exploit this vulnerability to cause application crashes, potentially leading to service availability interruptions. There is also a risk of unknown side effects.

Recommendation

It is recommended to update Google Chrome to version 11.0.696.65 or later to mitigate the risks associated with this vulnerability.

Other vulnerabilities in WebKit in Google Chrome

CVE-2011-1793High
In WebKit in Google Chrome before version 11.0.696.65, there is a vulnerability in RenderSVGResourceFilter.cpp that allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted SVG document leading to a 'stale pointer.'

Original NVD description (English source)

rendering/svg/RenderSVGText.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 does not properly perform a cast of an unspecified variable during an attempt to handle a block child, which allows remote attackers to cause a denial of service (application crash) or possibly have unknown other impact via a crafted text element in an SVG document.